Research · Dec 30, 2024 · ZeroDay Catalog
Critical OS Command Injection Vulnerability in DrayTek Vigor Routers
A critical OS command injection vulnerability has been identified in DrayTek Vigor routers, necessitating immediate action from affected users.
What changed
A critical vulnerability has been discovered in the DrayTek Vigor2960 and Vigor300B routers, specifically within the Web Management Interface. This flaw allows for OS command injection through the manipulation of session arguments in the file /cgi-bin/mainfunction.cgi/apmcfgupload.
The vulnerability can be exploited remotely, posing significant risks to network security.
Who is affected
Users of the following products are at risk due to this vulnerability:
DrayTek Vigor2960 and Vigor300B routers running firmware version 1.5.1.4 are specifically impacted.
- DrayTek Vigor2960 routers
- DrayTek Vigor300B routers
- Organizations utilizing affected firmware versions
What to do
To mitigate the risks associated with this vulnerability, it is imperative to upgrade the affected routers to firmware version 1.5.1.5 or later. This update addresses the OS command injection issue and enhances overall security.
Users should also review their network configurations and monitor for any suspicious activity that may indicate exploitation attempts.
- Upgrade to firmware version 1.5.1.5 immediately.
- Review network security settings.
- Monitor for unusual activity on the network.