CVE-2023-24229

CVSS 7.8 HIGHEPSS 6.7%CWE-78

Vexday Risk Score

21Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 7.8EPSS 6.7%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

15 mar 2023Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

DrayTek Vigor2960 v1.5.1.4 allows an authenticated attacker with network access to the web management interface to inject operating system commands via the mainfunction.cgi 'parameter' parameter. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Productos afectados

n/a · n/a

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://github.com/sadwwcxz/Vul https://web.archive.org/web/20230315181013/https://github.com/sadwwcxz/Vul https://www.draytek.com/https://www.draytek.com/about/newsroom/2021/2021/end-of-life-notification-vigor2960 https://www.draytek.com/support/knowledge-base/5465 https://www.draytek.co.uk/support/guides/kb-remotemanagement