{ "id": "CVE-2024-44844", "sourceIdentifier": "cve@mitre.org", "published": "2024-09-06T21:15:12.160", "lastModified": "2024-09-09T13:03:38.303", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", "value": "DrayTek Vigor3900 v1.5.1.6 was discovered to contain an authenticated command injection vulnerability via the name parameter in the run_command function." }, { "lang": "es", "value": "Se descubri\u00f3 que DrayTek Vigor3900 v1.5.1.6 conten\u00eda una vulnerabilidad de inyecci\u00f3n de comando autenticado a trav\u00e9s del par\u00e1metro de nombre en la funci\u00f3n run_command." } ], "metrics": {}, "references": [ { "url": "https://github.com/glkfc/IoT-Vulnerability/blob/main/DaryTek/vigor3900_1.md", "source": "cve@mitre.org" } ] }