CVE-2024-43027 - OpenCVE

DrayTek Vigor 3900 before v1.5.1.5_Beta, DrayTek Vigor 2960 before v1.5.1.5_Beta and DrayTek Vigor 300B before v1.5.1.5_Beta were discovered to contain a command injection vulnerability via the action parameter at cgi-bin/mainfunction.cgi.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation poc

Automatable no

Technical Impact total

Vendors	Products
Draytek	Vigor2960 Firmware Vigor300b Firmware Vigor3900 Firmware

No data.

No data.

References

Link	Providers
https://github.com/N1nEmAn/wp/blob/main/V3900.md

History

Fri, 23 Aug 2024 18:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Draytek Draytek vigor2960 Firmware Draytek vigor300b Firmware Draytek vigor3900 Firmware
Weaknesses		CWE-77
CPEs		cpe:2.3:o:draytek:vigor2960_firmware:::::::: cpe:2.3:o:draytek:vigor300b_firmware:::::::: cpe:2.3:o:draytek:vigor3900_firmware::::::::
Vendors & Products		Draytek Draytek vigor2960 Firmware Draytek vigor300b Firmware Draytek vigor3900 Firmware
Metrics		cvssV3_1 `{'score': 8, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Wed, 21 Aug 2024 16:00:00 +0000

Type	Values Removed	Values Added
Description		DrayTek Vigor 3900 before v1.5.1.5_Beta, DrayTek Vigor 2960 before v1.5.1.5_Beta and DrayTek Vigor 300B before v1.5.1.5_Beta were discovered to contain a command injection vulnerability via the action parameter at cgi-bin/mainfunction.cgi.
References		https://github.com/N1nEmAn/wp/blob/main/V3900.md

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2024-08-21T00:00:00

Updated: 2024-08-23T17:57:39.551Z

Reserved: 2024-08-05T00:00:00

Link: CVE-2024-43027

Vulnrichment

Updated: 2024-08-23T17:57:11.490Z

NVD

Status : Awaiting Analysis

Published: 2024-08-21T16:15:08.297

Modified: 2024-08-23T18:35:06.387

Link: CVE-2024-43027

Redhat

No data.

{"dataType": "CVE_RECORD", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2024-43027", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2024-08-23T17:57:39.551Z", "dateReserved": "2024-08-05T00:00:00", "datePublished": "2024-08-21T00:00:00"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-08-21T15:49:43.911938"}, "descriptions": [{"lang": "en", "value": "DrayTek Vigor 3900 before v1.5.1.5_Beta, DrayTek Vigor 2960 before v1.5.1.5_Beta and DrayTek Vigor 300B before v1.5.1.5_Beta were discovered to contain a command injection vulnerability via the action parameter at cgi-bin/mainfunction.cgi."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://github.com/N1nEmAn/wp/blob/main/V3900.md"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-77", "lang": "en", "description": "CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')"}]}], "affected": [{"vendor": "draytek", "product": "vigor3900_firmware", "cpes": ["cpe:2.3:o:draytek:vigor3900_firmware:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "1.5.1.5_Beta", "versionType": "custom"}]}, {"vendor": "draytek", "product": "vigor2960_firmware", "cpes": ["cpe:2.3:o:draytek:vigor2960_firmware:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "1.5.1.5_Beta", "versionType": "custom"}]}, {"vendor": "draytek", "product": "vigor300b_firmware", "cpes": ["cpe:2.3:o:draytek:vigor300b_firmware:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "1.5.1.5_Beta", "versionType": "custom"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-08-23T17:52:44.387093Z", "id": "CVE-2024-43027", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-23T17:57:39.551Z"}}]}, "dataVersion": "5.1"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-43027", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-08-23T17:52:44.387093Z"}}}], "affected": [{"cpes": ["cpe:2.3:o:draytek:vigor3900_firmware:*:*:*:*:*:*:*:*"], "vendor": "draytek", "product": "vigor3900_firmware", "versions": [{"status": "affected", "version": "0", "lessThan": "1.5.1.5_Beta", "versionType": "custom"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:draytek:vigor2960_firmware:*:*:*:*:*:*:*:*"], "vendor": "draytek", "product": "vigor2960_firmware", "versions": [{"status": "affected", "version": "0", "lessThan": "1.5.1.5_Beta", "versionType": "custom"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:draytek:vigor300b_firmware:*:*:*:*:*:*:*:*"], "vendor": "draytek", "product": "vigor300b_firmware", "versions": [{"status": "affected", "version": "0", "lessThan": "1.5.1.5_Beta", "versionType": "custom"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-77", "description": "CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-23T17:57:11.490Z"}}], "cna": {"affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "references": [{"url": "https://github.com/N1nEmAn/wp/blob/main/V3900.md"}], "descriptions": [{"lang": "en", "value": "DrayTek Vigor 3900 before v1.5.1.5_Beta, DrayTek Vigor 2960 before v1.5.1.5_Beta and DrayTek Vigor 300B before v1.5.1.5_Beta were discovered to contain a command injection vulnerability via the action parameter at cgi-bin/mainfunction.cgi."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-08-21T15:49:43.911938"}}}, "cveMetadata": {"cveId": "CVE-2024-43027", "state": "PUBLISHED", "dateUpdated": "2024-08-23T17:57:39.551Z", "dateReserved": "2024-08-05T00:00:00", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2024-08-21T00:00:00", "assignerShortName": "mitre"}, "dataVersion": "5.1"}