Approved changes feed: RSS · Atom

cpe:2.3:o:draytek:vigor3900_firmware:1.5.1.3:*:*:*:*:*:*:*

part: o version: 1.5.1.3 update: *

VendorDraytek (7ad8e731-44c4-554d-87bc-d3dbc441f2c7)
ProductVigor3900 Firmware (afe3fa67-349f-56f2-9d6e-370b74fd5f6b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-51304 vulnerable 2026-06-08 06:52:11.895581 Details available
In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the ldap_search_dn function.
Published: 2024-10-30T00:00:00.000Z
Updated: 2024-10-30T17:22:21.011Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51301 vulnerable 2026-06-08 06:52:11.895000 Details available
In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the packet_monitor function.
Published: 2024-10-30T00:00:00.000Z
Updated: 2024-10-30T17:15:48.466Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51300 vulnerable 2026-06-08 06:52:11.894302 Details available
In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the get_rrd function.
Published: 2024-10-30T00:00:00.000Z
Updated: 2024-10-30T17:16:55.650Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51299 vulnerable 2026-06-08 06:52:11.893780 Details available
In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the dumpSyslog function.
Published: 2024-10-30T00:00:00.000Z
Updated: 2024-10-30T17:21:27.321Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51298 vulnerable 2026-06-08 06:52:11.893348 Details available
In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the doGRETunnel function.
Published: 2024-10-30T00:00:00.000Z
Updated: 2025-03-19T20:47:20.953Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51296 vulnerable 2026-06-08 06:52:11.892601 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51260 vulnerable 2026-06-08 06:52:11.892117 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51259 vulnerable 2026-06-08 06:52:11.891610 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51258 vulnerable 2026-06-08 06:52:11.891269 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51257 vulnerable 2026-06-08 06:52:11.890929 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51255 vulnerable 2026-06-08 06:52:11.890590 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51254 vulnerable 2026-06-08 06:52:11.890026 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51253 vulnerable 2026-06-08 06:52:11.889668 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51252 vulnerable 2026-06-08 06:52:11.888936 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51251 vulnerable 2026-06-08 06:52:11.887844 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51249 vulnerable 2026-06-08 06:52:11.887467 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51248 vulnerable 2026-06-08 06:52:11.886905 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51247 vulnerable 2026-06-08 06:52:11.886156 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51246 vulnerable 2026-06-08 06:52:11.885714 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51245 vulnerable 2026-06-08 06:52:11.885100 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51244 vulnerable 2026-06-08 06:52:11.882723 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-48153 vulnerable 2026-06-08 06:48:13.648942 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45893 vulnerable 2026-06-08 06:48:09.853419 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45891 vulnerable 2026-06-08 06:48:09.852875 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45890 vulnerable 2026-06-08 06:48:09.852552 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45889 vulnerable 2026-06-08 06:48:09.852087 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45888 vulnerable 2026-06-08 06:48:09.851742 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45887 vulnerable 2026-06-08 06:48:09.851312 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45885 vulnerable 2026-06-08 06:48:09.850975 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45884 vulnerable 2026-06-08 06:48:09.850604 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45882 vulnerable 2026-06-08 06:48:09.848696 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-43118 vulnerable 2026-06-08 05:36:42.301058 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.