swing WinMin

## Disclosure of vulnerabilities in Vigor2960 and Vigor3900.md

      
        
          
            
              
              1 file
            
          
          
            
              
              0 forks
            
          
          
            
              
              0 comments
            
          
          
            
              
              1 star
            
          
        
        
          
              
          
          
            
                WinMin
                / Disclosure of vulnerabilities in Vigor2960 and Vigor3900.md
            
            
              Last active
              August 18, 2022 08:27
            
              
                Disclosure of vulnerabilities in Vigor2960 and Vigor3900 
              
          
        
      
        
  
      
    Version

Vigor2960 fw1.5.1.1RC3 (r8167) Vigor3900 fw1.5.1.1beta_r8167
Vulnerability details

There are some command injection vulnerabilities in the mainfunction.cgi file. The details are as follows:
1. in downlaod_ovpn function