VULNERABILITY INTELLIGENCE

CVE-2024-51300

CVSS score8.8 HIGH

EPSS probability0.61%

CISA KEVNot currently listed

Published2024-10-30

Last modified2026-06-17

Description

In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the get_rrd function.