cve.bz

CVE-2023-24229

7.8 highEPSS 6.7%

High (7.8) in draytek vigor2960 firmware. EPSS 6.7% chance of exploitation in the next 30 days.

DrayTek Vigor2960 v1.5.1.4 allows an authenticated attacker with network access to the web management interface to inject operating system commands via the mainfunction.cgi 'parameter' parameter. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Severity

CVSS 3.1

7.8 high
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
6.7% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
CWEs
CWE-77, CWE-78
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON