CVE-2024-45885

Summary

CVE-2024-45885 is a post-authentication command injection vulnerability affecting DrayTek Vigor3900 devices running software version 1.5.1.3. An attacker can exploit this vulnerability by manipulating the `action` parameter in the `cgi-bin/mainfunction.cgi` file, specifically when it is set to `autodiscovery_clear`. Successful exploitation could result in arbitrary command execution on the affected device. This poses a significant risk to network security and requires immediate attention from users to apply available patches or updates.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.