Draytek Vigor3900 vulnerabilities, page 3

48 vulnerabilities

Known vulnerabilities in Draytek Vigor3900, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8HighCVE-2024-45888draytek · vigor3900_firmwaredraytek vigor3900_firmwareDrayTek Vigor3900 1.5.1.3 contains a command injection vulnerability. This vulnerability occurs when the `action` parameter in `cgi-bin/mainfunction.cgi` is set to `set_ap_map_config.'EPSS2.03%8HighCVE-2024-45884draytek · vigor3900_firmwaredraytek vigor3900_firmwareDrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This vulnerability occurs when the `action` parameter in `cgi-bin/mainfunction.cgi` is set to `setSWMGroup.`EPSS2.14%8HighCVE-2024-45887draytek · vigor3900_firmwaredraytek vigor3900_firmwareDrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This vulnerability occurs when the `action` parameter in `cgi-bin/mainfunction.cgi` is set to `doOpenVPN.`EPSS2.14%8HighCVE-2024-45890draytek · vigor3900_firmwaredraytek vigor3900_firmwareDrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability This vulnerability occurs when the `action` parameter in `cgi-bin/mainfunction.cgi` is set to `download_ovpn.`EPSS2.14%8HighCVE-2024-45889draytek · vigor3900_firmwaredraytek vigor3900_firmwareDrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This vulnerability occurs when the `action` parameter in `cgi-bin/mainfunction.cgi` is set to `commandTable.`EPSS1.64%8HighCVE-2024-45893draytek · vigor3900_firmwaredraytek vigor3900_firmwareDrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This vulnerability occurs when the `action` parameter in `cgi-bin/mainfunction.cgi` is set to `setSWMOption.`EPSS1.64%8HighCVE-2024-45882draytek · vigor3900_firmwaredraytek vigor3900_firmwareDrayTek Vigor3900 1.5.1.3 contains a command injection vulnerability. This vulnerability occurs when the `action` parameter in `cgi-bin/mainfunction.cgi` is set to `delete_map_profile.`EPSS1.56%8HighCVE-2024-45885draytek · vigor3900_firmwaredraytek vigor3900_firmwareDrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This vulnerability occurs when the `action` parameter in `cgi-bin/mainfunction.cgi` is set to `autodiscovery_clear.`EPSS1.33%