Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A Remote Command Injection vulnerability exists in DrayTek Vigor 2960 1.5.1.3, DrayTek Vigor 3900 1.5.1.3, and DrayTek Vigor 300B 1.5.1.3 via a crafted HTTP message containing malformed QUERY STRING in mainfunction.cgi, which could let a remote malicious user execute arbitrary code.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
多款 DrayTek Vigor 产品命令注入漏洞
Vulnerability Description
Draytek DrayTek Vigor3900等都是中国台湾居易科技（Draytek）公司的产品。DrayTek Vigor3900是一款宽带路由器/VPN网关设备。DrayTek Vigor2960等都是中国DrayTek公司的产品。DrayTek Vigor2960是一款双 WAN 宽带路由器/VPN 网关。DrayTek Vigor300B是一款运行在 Linux 系统上的 Quad-WAN 负载均衡宽带路由器。 DrayTek Vigor 2960 1.5.1.3版本、DrayTek Vigo
CVSS Information
N/A
Vulnerability Type
N/A