Vulnerability Details CVE-2024-43027
DrayTek Vigor 3900 before v1.5.1.5_Beta, DrayTek Vigor 2960 before v1.5.1.5_Beta and DrayTek Vigor 300B before v1.5.1.5_Beta were discovered to contain a command injection vulnerability via the action parameter at cgi-bin/mainfunction.cgi.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.028
EPSS Ranking 85.4%
CVSS Severity
CVSS v3 Score 8.0
Products affected by CVE-2024-43027
-
cpe:2.3:h:draytek:vigor2960:-
-
cpe:2.3:h:draytek:vigor300b:-
-
cpe:2.3:h:draytek:vigor3900:-
-
cpe:2.3:o:draytek:vigor2960_firmware:-
-
cpe:2.3:o:draytek:vigor2960_firmware:1.0.6
-
cpe:2.3:o:draytek:vigor2960_firmware:1.0.6.1
-
cpe:2.3:o:draytek:vigor2960_firmware:1.0.6.2
-
cpe:2.3:o:draytek:vigor2960_firmware:1.0.7
-
cpe:2.3:o:draytek:vigor2960_firmware:1.0.7.1
-
cpe:2.3:o:draytek:vigor2960_firmware:1.0.8
-
cpe:2.3:o:draytek:vigor2960_firmware:1.0.8.1
-
cpe:2.3:o:draytek:vigor2960_firmware:1.0.8.2
-
cpe:2.3:o:draytek:vigor2960_firmware:1.0.9
-
cpe:2.3:o:draytek:vigor2960_firmware:1.0.9.1
-
cpe:2.3:o:draytek:vigor2960_firmware:1.1.0
-
cpe:2.3:o:draytek:vigor2960_firmware:1.1.0.1
-
cpe:2.3:o:draytek:vigor2960_firmware:1.1.0.2
-
cpe:2.3:o:draytek:vigor2960_firmware:1.2.0
-
cpe:2.3:o:draytek:vigor2960_firmware:1.2.1
-
cpe:2.3:o:draytek:vigor2960_firmware:1.2.2
-
cpe:2.3:o:draytek:vigor2960_firmware:1.3.0
-
cpe:2.3:o:draytek:vigor2960_firmware:1.3.1
-
cpe:2.3:o:draytek:vigor2960_firmware:1.3.2
-
cpe:2.3:o:draytek:vigor2960_firmware:1.3.2.1
-
cpe:2.3:o:draytek:vigor2960_firmware:1.3.3
-
cpe:2.3:o:draytek:vigor2960_firmware:1.3.3.1
-
cpe:2.3:o:draytek:vigor2960_firmware:1.3.3.2
-
cpe:2.3:o:draytek:vigor2960_firmware:1.4.0
-
cpe:2.3:o:draytek:vigor2960_firmware:1.4.1
-
cpe:2.3:o:draytek:vigor2960_firmware:1.4.2.1
-
cpe:2.3:o:draytek:vigor2960_firmware:1.4.3
-
cpe:2.3:o:draytek:vigor2960_firmware:1.4.4
-
cpe:2.3:o:draytek:vigor2960_firmware:1.5.0
-
cpe:2.3:o:draytek:vigor2960_firmware:1.5.1
-
cpe:2.3:o:draytek:vigor2960_firmware:1.5.1.1
-
cpe:2.3:o:draytek:vigor2960_firmware:1.5.1.2
-
cpe:2.3:o:draytek:vigor2960_firmware:1.5.1.3
-
cpe:2.3:o:draytek:vigor2960_firmware:1.5.1.4
-
cpe:2.3:o:draytek:vigor300b_firmware:-
-
cpe:2.3:o:draytek:vigor300b_firmware:1.0.7
-
cpe:2.3:o:draytek:vigor300b_firmware:1.0.8
-
cpe:2.3:o:draytek:vigor300b_firmware:1.0.8.2
-
cpe:2.3:o:draytek:vigor300b_firmware:1.0.9
-
cpe:2.3:o:draytek:vigor300b_firmware:1.0.9.1
-
cpe:2.3:o:draytek:vigor300b_firmware:1.1.0
-
cpe:2.3:o:draytek:vigor300b_firmware:1.1.0.2
-
cpe:2.3:o:draytek:vigor300b_firmware:1.2.0
-
cpe:2.3:o:draytek:vigor300b_firmware:1.2.1
-
cpe:2.3:o:draytek:vigor300b_firmware:1.2.2
-
cpe:2.3:o:draytek:vigor300b_firmware:1.3.0
-
cpe:2.3:o:draytek:vigor300b_firmware:1.3.1
-
cpe:2.3:o:draytek:vigor300b_firmware:1.3.2
-
cpe:2.3:o:draytek:vigor300b_firmware:1.3.3
-
cpe:2.3:o:draytek:vigor300b_firmware:1.3.3.1
-
cpe:2.3:o:draytek:vigor300b_firmware:1.3.3.2
-
cpe:2.3:o:draytek:vigor300b_firmware:1.4.0
-
cpe:2.3:o:draytek:vigor300b_firmware:1.4.1
-
cpe:2.3:o:draytek:vigor300b_firmware:1.4.2.1
-
cpe:2.3:o:draytek:vigor300b_firmware:1.4.3
-
cpe:2.3:o:draytek:vigor300b_firmware:1.4.4
-
cpe:2.3:o:draytek:vigor300b_firmware:1.5.1
-
cpe:2.3:o:draytek:vigor300b_firmware:1.5.1.1
-
cpe:2.3:o:draytek:vigor300b_firmware:1.5.1.3
-
cpe:2.3:o:draytek:vigor300b_firmware:1.5.1.4
-
cpe:2.3:o:draytek:vigor3900_firmware:-
-
cpe:2.3:o:draytek:vigor3900_firmware:1.4.4
-
cpe:2.3:o:draytek:vigor3900_firmware:1.5.1
-
cpe:2.3:o:draytek:vigor3900_firmware:1.5.1.1
-
cpe:2.3:o:draytek:vigor3900_firmware:1.5.1.3
-
cpe:2.3:o:draytek:vigor3900_firmware:1.5.1.4