CVE-2023-24229
CVSS Score
7.8
EPSS Score
0.0%
EPSS Percentile
0th
DrayTek Vigor2960 v1.5.1.4 allows an authenticated attacker with network access to the web management interface to inject operating system commands via the mainfunction.cgi 'parameter' parameter. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
| Vendor | n/a |
| Product | n/a |
| Published | Mar 15, 2023 |
| Last Updated | Aug 2, 2024 |
Stay Ahead of the Next One
Get instant alerts for n/a n/a
Be the first to know when new high vulnerabilities affecting n/a n/a are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
n/a / n/a
n/a
References
draytek.com: https://www.draytek.com/ github.com: https://github.com/sadwwcxz/Vul web.archive.org: https://web.archive.org/web/20230315181013/https://github.com/sadwwcxz/Vul draytek.co.uk: https://www.draytek.co.uk/support/guides/kb-remotemanagement draytek.com: https://www.draytek.com/support/knowledge-base/5465 draytek.com: https://www.draytek.com/about/newsroom/2021/2021/end-of-life-notification-vigor2960