CVE-2024-45887
43Vexday Risk Score
Prioritize patching. It exploitation observed by VulnCheck.
ssvc Actcvss 8epss 2.1%
from disclosure to weapon
Published on NVDNov 4
VulnCheck+291d
exploitation probability
2.1%top 19% of all CVEs
observed exploitation
yesVulnCheck
DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This vulnerability occurs when the `action` parameter in `cgi-bin/mainfunction.cgi` is set to `doOpenVPN.`
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a