Threats tagged 'ghsa-v778-r5cg-2pmh'

A critical command injection vulnerability exists in DrayTek Vigor2960 version 1.5.1.6 within the set_table function of /cgi-bin/mainfunction.cgi. This flaw allows remote attackers with high privileges to execute arbitrary commands by manipulating the jsondata argument. The vulnerability has a CVSS score of 9.1 and public exploit details have been disclosed. Upgrading to version 1.5.1.7 resolves the issue.