PT-2023-9802 · Draytek · Draytek Vigor2960

Published 2023-03-15 · Updated 2024-12-10 · CVE-2023-24229

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions DrayTek Vigor2960 version 1.5.1.4

Description The issue allows an authenticated attacker with network access to the web management interface to inject operating system commands via the parameter parameter in the mainfunction.cgi component. This can enable the execution of arbitrary commands. The vulnerability exists due to the lack of measures to neutralize special elements.

Recommendations For DrayTek Vigor2960 version 1.5.1.4, consider disabling access to the mainfunction.cgi component or restricting the use of the parameter parameter until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Command Injection

Weakness Enumeration

CWE-78

CWE-77

Related Identifiers

BDU:2024-11409

CVE-2023-24229

Affected Products

Draytek Vigor2960

References · 16

• 🔥❌ https://github.com/sadwwcxz/Vul · Exploit, Deleted
• https://osv.dev/vulnerability/CVE-2023-24229 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-24229 · Security Note
• https://bdu.fstec.ru/vul/2024-11409 · Security Note
• https://draytek.co.uk/support/guides/kb-remotemanagement · Note
• https://draytek.com/support/knowledge-base/5465 · Note
• https://twitter.com/fletch_ai/status/1842112495273869404 · Twitter Post
• https://twitter.com/rst_cloud/status/1837592598187327613 · Twitter Post
• https://t.me/cvenotify/88521 · Telegram Post
• https://t.me/cibsecurity/60081 · Telegram Post
• https://t.me/cvenotify/46468 · Telegram Post
• https://draytek.com · Note
• https://draytek.com/about/newsroom/2021/2021/end-of-life-notification-vigor2960 · Note
• https://web.archive.org/web/20230315181013/https://github.com/sadwwcxz/Vul · Note
• https://t.me/cvenotify/86330 · Telegram Post