Skip to content

Known vulnerabilities in DrayTek vigor3900_firmware

Is your version affected?

CVE Summary Score Published
CVE-2024-51251 In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary… 8.0 High Nov 4, 2024
CVE-2024-51249 In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary… 8.0 High Nov 4, 2024
CVE-2024-51246 In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary… 8.0 High Nov 4, 2024
CVE-2024-51253 In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary… 8.0 High Nov 4, 2024
CVE-2024-45884 DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability 8.0 High Nov 4, 2024
CVE-2024-45882 DrayTek Vigor3900 1.5.1.3 contains a command injection vulnerability 8.0 High Nov 4, 2024
CVE-2024-45893 DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability 8.0 High Nov 4, 2024
CVE-2024-45891 DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability 8.0 High Nov 4, 2024
CVE-2024-45890 DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability This vulnerability occurs… 8.0 High Nov 4, 2024
CVE-2024-45889 DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability 8.0 High Nov 4, 2024
CVE-2024-45888 DrayTek Vigor3900 1.5.1.3 contains a command injection vulnerability 8.0 High Nov 4, 2024
CVE-2024-45887 DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability 8.0 High Nov 4, 2024
CVE-2024-45885 DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability 8.0 High Nov 4, 2024
CVE-2024-51248 In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary… 8.0 High Nov 1, 2024
CVE-2024-51247 In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary… 8.0 High Nov 1, 2024
CVE-2024-51245 In DrayTek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary… 8.0 High Nov 1, 2024
CVE-2024-51244 In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary… 8.0 High Nov 1, 2024
CVE-2024-51252 In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary… 8.0 High Nov 1, 2024
CVE-2024-51260 DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary… 9.8 Critical Oct 31, 2024
CVE-2024-51259 DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary… 9.8 Critical Oct 31, 2024
CVE-2024-51255 DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary… 9.8 Critical Oct 31, 2024
CVE-2024-51254 DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary… 8.8 High Oct 31, 2024
CVE-2024-51296 In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary… 8.8 High Oct 30, 2024
CVE-2024-51258 DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary… 8.8 High Oct 30, 2024
CVE-2024-51257 DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary… 8.8 High Oct 30, 2024

Other DrayTek products