CVE-2024-48074 - "DrayTek Vigor2960 Command Injection RCE"

CVE ID : CVE-2024-48074
Published : Oct. 28, 2024, 12:15 p.m. | 24 minutes ago
Description : An authorized RCE vulnerability exists in the DrayTek Vigor2960 router version 1.4.4, where an attacker can place a malicious command into the table parameter of the doPPPoE function in the cgi-bin/mainfunction.cgi route, and finally the command is executed by the system function.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...