An authorized RCE vulnerability exists in the DrayTek Vigor2960 router version 1.4.4, where an attacker can place a malicious command into the table parameter of the doPPPoE function in the cgi-bin/mainfunction.cgi route, and finally the command is executed by the system function.
References
| Link | Resource |
|---|---|
| https://gist.github.com/Giles-one/6425e97dcd1ec97a722a1e20da25fad7 | Third Party Advisory |
| https://github.com/Giles-one/Vigor2960Crack | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
17 May 2025, 02:14
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Draytek vigor2960 Firmware
Draytek Draytek vigor2960 |
|
| CPE | cpe:2.3:o:draytek:vigor2960_firmware:1.4.4:*:*:*:*:*:*:* cpe:2.3:h:draytek:vigor2960:-:*:*:*:*:*:*:* |
|
| References | () https://gist.github.com/Giles-one/6425e97dcd1ec97a722a1e20da25fad7 - Third Party Advisory | |
| References | () https://github.com/Giles-one/Vigor2960Crack - Exploit, Third Party Advisory |
Information
Published : 2024-10-28 12:15
Updated : 2025-05-17 02:14
NVD link : CVE-2024-48074
Mitre link : CVE-2024-48074
CVE.ORG link : CVE-2024-48074
JSON object : View
Products Affected
draytek
- vigor2960
- vigor2960_firmware
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')