CVE-2024-45884

Summary

CVE-2024-45884 is a post-authentication command injection vulnerability affecting the DrayTek Vigor3900 with firmware version 1.5.1.3. By setting the `action` parameter in `cgi-bin/mainfunction.cgi` to `setSWMGroup,` an attacker can inject malicious commands and potentially gain unauthorized administrative access to the device. This vulnerability poses a significant risk to network security and requires immediate attention from users to apply available patches or updates.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.