CVE-2024-51253

Summary

CVE-2024-51253 is a newly disclosed vulnerability affecting the Draytek Vigor3900 router running version 1.5.1.3. This issue allows attackers to inject malicious commands into the mainfunction.cgi file, ultimately executing arbitrary commands through the doL2TP function. By exploiting this flaw, unauthorized users can gain control over the affected device, potentially resulting in data theft, unauthorized access, or other malicious activities. Routers with this vulnerability should be updated to the latest firmware as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.