CVE-2023-24229

CVSS 7.8 HIGHEPSS 6.7%CWE-78

Vexday Risk Score

21Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 7.8EPSS 6.7%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

15 mar 2023Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

DrayTek Vigor2960 v1.5.1.4 allows an authenticated attacker with network access to the web management interface to inject operating system commands via the mainfunction.cgi 'parameter' parameter. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Produtos afetados

n/a · n/a

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://github.com/sadwwcxz/Vul https://web.archive.org/web/20230315181013/https://github.com/sadwwcxz/Vul https://www.draytek.com/https://www.draytek.com/about/newsroom/2021/2021/end-of-life-notification-vigor2960 https://www.draytek.com/support/knowledge-base/5465 https://www.draytek.co.uk/support/guides/kb-remotemanagement