Threats affecting pkg:github/draytek/Vigor3900

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.0	EPSS 1.3%	CVE-2024-45885Vigor3900 · OS Command Injection High8.0EPSS 1.3%2024-11-04CVE Database V5CVE-2024-45885 DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This vulnerability occurs when the `action` parameter in `cgi-bin/mainfunction.cgi` is set to `autodiscovery_clear.` EPSS 1.3%Vulnerability CWE-78	CVE Database V5	2024-11-04
High	8.0	EPSS 1.9%	CVE-2024-44844Vigor3900 · Command Injection High8.0EPSS 1.9%2024-09-06CVE Database V5CVE-2024-44844 DrayTek Vigor3900 v1.5.1.6 was discovered to contain an authenticated command injection vulnerability via the name parameter in the run_command function. EPSS 1.9%Vulnerability CWE-77	CVE Database V5	2024-09-06

Page 1 of 1