CVE-2024-51260: Command Injection
Published Oct 31, 2024
·Updated
DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the acmeprocess function.
Affected Software
1 affected component
DrayTek Vigor3900
Event History
Oct 31, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-51260?
CVE-2024-51260 is classified as a critical vulnerability due to its potential for arbitrary command execution.
2
How do I fix CVE-2024-51260?
To mitigate CVE-2024-51260, update the DrayTek Vigor3900 firmware to a patched version that addresses the vulnerability.
3
What types of attacks are possible with CVE-2024-51260?
CVE-2024-51260 enables attackers to inject malicious commands and execute arbitrary commands on the device.
4
Which devices are affected by CVE-2024-51260?
CVE-2024-51260 affects the DrayTek Vigor3900 running firmware version 1.5.1.3.
5
Is CVE-2024-51260 being actively exploited?
As of now, there are reports indicating that CVE-2024-51260 is being exploited in the wild.