Security Advisory
CVE-2023-24229
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
DrayTek Vigor2960 v1.5.1.4 allows an authenticated attacker with network access to the web management interface to inject operating system commands via the mainfunction.cgi parameter parameter. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.