PT-2024-9899 · Draytek · Draytek Vigor2960+1

Netsecfish

·

Published

2024-12-27

·

Updated

2026-05-02

·

CVE-2024-12987

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions DrayTek Vigor2960 and Vigor300B version 1.5.1.4
Description A critical vulnerability exists in the Web Management Interface of DrayTek Vigor2960 and Vigor300B. The issue is related to the manipulation of the session argument in the /cgi-bin/mainfunction.cgi/apmcfgupload endpoint, which leads to os command injection. This allows a remote attacker to execute arbitrary code. It is estimated that around 66,000 devices are potentially affected. The exploit has been disclosed to the public and may be used.
Recommendations For DrayTek Vigor2960 and Vigor300B version 1.5.1.4, upgrade to version 1.5.1.5 to address this issue. As a temporary workaround, consider restricting access to the /cgi-bin/mainfunction.cgi/apmcfgupload endpoint to minimize the risk of exploitation. Avoid using the session argument in the affected API endpoint until the issue is resolved.

Exploit

Fix

OS Command Injection

Command Injection

Weakness Enumeration

CWE-78CWE-77

Related Identifiers

BDU:2025-00008
CVE-2024-12987

Affected Products

Draytek Vigor2960
Draytek Vigor300B