Loading
An authorized RCE vulnerability exists in the DrayTek Vigor2960 router version 1.4.4, where an attacker can place a malicious command into the table parameter of the doPPPoE function in the cgi-bin/mainfunction.cgi route, and finally the command is executed by the system function.
Use CWE-78, Draytek vendor hub and Vigor2960 Firmware product page to widen CVE-2024-48074 into its surrounding weakness, vendor, and product context.
Compare it with CVE-2020-15415, CVE-2024-12987 and CVE-2021-43118 for nearby disclosures in the same product family.