Skip to content

Instantly share code, notes, and snippets.

@rrrrrrri

rrrrrrri/gist:8e9cac08eb4d9c01ab258bd5b0f8f7d8

Last active February 18, 2024 00:42
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save rrrrrrri/8e9cac08eb4d9c01ab258bd5b0f8f7d8 to your computer and use it in GitHub Desktop.
Save rrrrrrri/8e9cac08eb4d9c01ab258bd5b0f8f7d8 to your computer and use it in GitHub Desktop.
Download ZIP
CVE-2024-23721
Raw
gistfile1.txt
[CVE ID]
CVE-2024-23721
[PRODUCT]
Draytek Vigor 3910 router
[VERSION]
Vigor3910 <= v4.3.2.5
...
[TYPE]
Sensitive information disclosure
[DESCRIPTION]
There is a security vulnerability in Draytek 3910 router that could allow an unauthenticated attacker to access sensitive information on the target device.
The "process_post" function did not properly process the parameters submitted by the user, allowing the attacker to bypass session validation and export the configuration file.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment