CVE-2024-51246

Summary

CVE-2024-51246 is a newly disclosed vulnerability affecting the Draytek Vigor3900 device running version 1.5.1.3. This issue allows attackers to inject malicious commands into the mainfunction.cgi file and subsequently execute arbitrary commands by manipulating the doPPTP function. Successful exploitation could result in unauthorized access, data theft, or system compromise. Users are strongly advised to update their devices to the latest firmware version to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.