CVE-2024-44845

PoC —

CVSS 3.1

8.8 high

EPSS

2%p79

Published

Sep 6, 2024 (Sep 6, 2024)

Modified

Jun 17, 2026

Description

DrayTek Vigor3900 v1.5.1.6 was discovered to contain an authenticated command injection vulnerability via the value parameter in the filter_string function.

Vendors: draytek
Products: vigor3900 firmware
Weakness: CWE-78, CWE-77
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.0%)

In the news0 stories

No ingested article mentions this CVE yet.