Approved changes feed: RSS · Atom

cpe:2.3:o:draytek:vigor2960_firmware:1.4.4:*:*:*:*:*:*:*

part: o version: 1.4.4 update: *

VendorDraytek (7ad8e731-44c4-554d-87bc-d3dbc441f2c7)
ProductVigor2960 Firmware (042f9857-a251-537e-a0c8-63a1ead6847c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-48074 vulnerable 2026-06-08 06:48:13.611418 Details available
An authorized RCE vulnerability exists in the DrayTek Vigor2960 router version 1.4.4, where an attacker can place a malicious command into the table parameter of the doPPPoE function in the cgi-bin/mainfunction.cgi route, and finally the command is executed by the system function.
Published: 2024-10-28T00:00:00.000Z
Updated: 2024-11-08T21:08:35.165Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.