CVE-2024-12987DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injection
Explotación conocida — DrayTek Vigor Routers OS Command Injection Vulnerability
CISA confirmó el 15.05.2025 que esta vulnerabilidad se usa en ataques reales. Plazo para las agencias federales de EE. UU.: 05.06.2025.
Acción requerida: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. https://fw.draytek.com.tw/Vigor2960/Firmware/v1.5.1.5/DrayTek_Vigor2960_V1.5.1.5_01release-note.pdf ; https://fw.draytek.com.tw/Vigor300B/Firmware/v1.5.1.5/DrayTek_Vigor300B_V1.5.1.5_01release-note.pdf ; https://fw.draytek.com.tw/Vigor3900/Firmware/v1.5.1.5/DrayTek_Vigor3900_V1.5.1.5_01release-note.pdf ; https://nvd.nist.gov/vuln/detail/CVE-2024-12987
Descripción
A vulnerability, which was classified as critical, was found in DrayTek Vigor2960 and Vigor300B 1.5.1.4. Affected is an unknown function of the file /cgi-bin/mainfunction.cgi/apmcfgupload of the component Web Management Interface. The manipulation of the argument session leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.5.1.5 is able to address this issue. It is recommended to upgrade the affected component.
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| DrayTek | Vigor2960 | 1.5.1.4 | |
| draytek | vigor2960 firmware | 1.5.1.4 | |
| DrayTek | Vigor300B | 1.5.1.4 | |
| draytek | vigor300b firmware | 1.5.1.4 |
Referencias y parches
- VDB-289380 | DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injection vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
- VDB-289380 | CTI Indicators (IOB, IOC, TTP, IOA) signatureVDB Entry
- Submit #468795 | DrayTek Vigor2960, Vigor300B 1.5.1.4 Command Injection third-party-advisoryThird Party AdvisoryVDB Entry
- https://netsecfish.notion.site/Command-Injection-in-apmcfgupload-endpoint-for-DrayTek-Gateway-Devices-1676b68… exploitExploitThird Party Advisory
- https://fw.draytek.com.tw/Vigor2960/Firmware/v1.5.1.5/DrayTek_Vigor2960_V1.5.1.5_01release-note.pdf Release Notes
- https://fw.draytek.com.tw/Vigor300B/Firmware/v1.5.1.5/DrayTek_Vigor300B_V1.5.1.5_01release-note.pdf Release Notes
- https://fw.draytek.com.tw/Vigor3900/Firmware/v1.5.1.5/DrayTek_Vigor3900_V1.5.1.5_01release-note.pdf Not Applicable
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-12987 US Government Resource
Coincidencias CPE (NVD) (2)
cpe:2.3:o:draytek:vigor300b_firmware:1.5.1.4:*:*:*:*:*:*:*cpe:2.3:o:draytek:vigor2960_firmware:1.5.1.4:*:*:*:*:*:*:*