VULNERABILITY INTELLIGENCE

CVE-2024-45888

CVSS score8 HIGH

EPSS probability2.03%

CISA KEVNot currently listed

Published2024-11-04

Last modified2026-06-17

Description

DrayTek Vigor3900 1.5.1.3 contains a command injection vulnerability. This vulnerability occurs when the `action` parameter in `cgi-bin/mainfunction.cgi` is set to `set_ap_map_config.'