PT-2024-7998 · Draytek · Draytek Vigor3900

Published 2024-10-28 · Updated 2024-11-05 · CVE-2024-51245

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions DrayTek Vigor3900 version 1.5.1.3

Description The issue allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the rename table function. This is due to the lack of measures to neutralize special elements used in the operating system command. Exploitation of the issue may allow a remote attacker to execute arbitrary code.

Recommendations For DrayTek Vigor3900 version 1.5.1.3, consider disabling the rename table function as a temporary workaround until a patch is available. Restrict access to the mainfunction.cgi file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2024-09512

CVE-2024-51245

Affected Products

Draytek Vigor3900

References · 10

• 🔥 https://github.com/fu37kola/cve/blob/main/DrayTek/Vigor3900/1.5.1.3/DrayTek_Vigor_3900_1.5.1.3.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-51245 · Security Note
• https://bdu.fstec.ru/vul/2024-09512 · Security Note
• https://osv.dev/vulnerability/CVE-2024-51245 · Vendor Advisory
• https://twitter.com/CVEnew/status/1852495992358113465 · Twitter Post
• https://vulners.com/cve/CVE-2024-51245 · Note
• https://twitter.com/UndercodeNews/status/1853915035292082456 · Twitter Post
• https://vuldb.com/?id.282844 · Note
• https://twitter.com/VulmonFeeds/status/1852523930264780898 · Twitter Post
• https://t.me/cvedetector/9614 · Telegram Post