CVE-2023-24229
43Vexday Risk Score
Priorize a correção. Ela exploração observada pelo VulnCheck.
ssvc Actcvss 7.8epss 6.7%
da publicação à arma
Publicada no NVD15 de mar.
VulnCheck+553d
probabilidade de exploração
6.7%top 6% das CVEs
exploração observada
simVulnCheck
DrayTek Vigor2960 v1.5.1.4 allows an authenticated attacker with network access to the web management interface to inject operating system commands via the mainfunction.cgi 'parameter' parameter. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
n/a · n/aReferências
https://github.com/sadwwcxz/Vulhttps://web.archive.org/web/20230315181013/https://github.com/sadwwcxz/Vulhttps://www.draytek.com/https://www.draytek.com/about/newsroom/2021/2021/end-of-life-notification-vigor2960https://www.draytek.com/support/knowledge-base/5465https://www.draytek.co.uk/support/guides/kb-remotemanagement