PT-2024-17849 · Draytek · Draytek Vigor300B+1

Netsecfish

·

Published

2024-12-27

·

Updated

2025-01-05

·

CVE-2024-12986

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions DrayTek Vigor2960 and Vigor300B versions 1.5.1.3 through 1.5.1.4
Description A critical issue has been found in the Web Management Interface component, affecting some unknown processing of the file /cgi-bin/mainfunction.cgi/apmcfgupptim. The manipulation of the session argument leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Recommendations For DrayTek Vigor2960 and Vigor300B versions 1.5.1.3 through 1.5.1.4, upgrade to version 1.5.1.5 to address this issue. As a temporary workaround, consider restricting access to the vulnerable Web Management Interface component until the update is applied. Avoid using the session argument in the affected API endpoint until the issue is resolved.

Exploit

Fix

OS Command Injection

Command Injection

Weakness Enumeration

CWE-78CWE-77

Related Identifiers

CVE-2024-12986

Affected Products

Draytek Vigor2960
Draytek Vigor300B