Known Exploited Vulnerabilities May 15, 2025 · CISA KEV Catalog

CVE-2024-12987: Dray Tek Vigor Routers OS Command Injection Vulnerability

DrayTek Vigor2960, Vigor300B, and Vigor3900 routers contain an OS command injection vulnerability due to an unknown function of the file /cgi-bin/mainfunction.cgi/apmcfgupload of the component web management interface.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2024-12987 DrayTek
Related: CVE-2020-15415: Dray Tek Multiple Vigor Routers OS Command Injection Vulnerability Known Exploited Vulnerabilities · Sep 30, 2024
CVE-2021-20123: Draytek Vigor Connect Path Traversal Vulnerability Known Exploited Vulnerabilities · Sep 03, 2024
CVE-2021-20124: Draytek Vigor Connect Path Traversal Vulnerability Known Exploited Vulnerabilities · Sep 03, 2024