{"history":[{"alert":0,"cve":"CVE-2024-12987","id":22605,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.98223, \"percentile\": 0.99916}"},{"alert":0,"cve":"CVE-2024-12987","id":20225,"kind":"epss","observed_at":1794327601,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.98223, \"percentile\": 0.99915}"},{"alert":0,"cve":"CVE-2024-12987","id":18194,"kind":"epss","observed_at":1794241201,"payload":"{\"date\": \"2026-11-09\", \"epss\": 0.98223, \"percentile\": 0.99915}"},{"alert":0,"cve":"CVE-2024-12987","id":16258,"kind":"epss","observed_at":1794154800,"payload":"{\"date\": \"2026-11-08\", \"epss\": 0.98163, \"percentile\": 0.99913}"},{"alert":0,"cve":"CVE-2024-12987","id":14236,"kind":"epss","observed_at":1794068402,"payload":"{\"date\": \"2026-11-07\", \"epss\": 0.98163, \"percentile\": 0.99913}"},{"alert":0,"cve":"CVE-2024-12987","id":12018,"kind":"epss","observed_at":1793982001,"payload":"{\"date\": \"2026-11-06\", \"epss\": 0.98163, \"percentile\": 0.99913}"},{"alert":0,"cve":"CVE-2024-12987","id":10004,"kind":"epss","observed_at":1793938800,"payload":"{\"date\": \"2026-11-05\", \"epss\": 0.98163, \"percentile\": 0.99913}"},{"alert":0,"cve":"CVE-2024-12987","id":7552,"kind":"epss","observed_at":1793809200,"payload":"{\"date\": \"2026-11-04\", \"epss\": 0.98163, \"percentile\": 0.99913}"},{"alert":1,"cve":"CVE-2024-12987","id":6166,"kind":"cna","observed_at":1793787601,"payload":"{\"containers\": {\"adp\": [{\"metrics\": [{\"other\": {\"content\": {\"id\": \"CVE-2024-12987\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2025-05-17T03:56:02.764155Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}, {\"other\": {\"content\": {\"dateAdded\": \"2025-05-15\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-12987\"}, \"type\": \"kev\"}}], \"providerMetadata\": {\"dateUpdated\": \"2025-10-21T22:55:33.312Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"references\": [{\"tags\": [\"government-resource\"], \"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-12987\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2025-05-15T00:00:00.000Z\", \"value\": \"CVE-2024-12987 added to CISA KEV\"}], \"title\": \"CISA ADP Vulnrichment\"}, {\"providerMetadata\": {\"dateUpdated\": \"2025-05-15T00:13:26.288Z\", \"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\"}, \"references\": [{\"url\": \"https://fw.draytek.com.tw/Vigor3900/Firmware/v1.5.1.5/DrayTek_Vigor3900_V1.5.1.5_01release-note.pdf\"}, {\"url\": \"https://fw.draytek.com.tw/Vigor2960/Firmware/v1.5.1.5/DrayTek_Vigor2960_V1.5.1.5_01release-note.pdf\"}, {\"url\": \"https://fw.draytek.com.tw/Vigor300B/Firmware/v1.5.1.5/DrayTek_Vigor300B_V1.5.1.5_01release-note.pdf\"}], \"title\": \"CVE Program Container\", \"x_generator\": {\"engine\": \"ADPogram 0.0.1\"}}], \"cna\": {\"affected\": [{\"modules\": [\"Web Management Interface\"], \"product\": \"Vigor2960\", \"vendor\": \"DrayTek\", \"versions\": [{\"status\": \"affected\", \"version\": \"1.5.1.4\"}]}, {\"modules\": [\"Web Management Interface\"], \"product\": \"Vigor300B\", \"vendor\": \"DrayTek\", \"versions\": [{\"status\": \"affected\", \"version\": \"1.5.1.4\"}]}], \"credits\": [{\"lang\": \"en\", \"type\": \"reporter\", \"value\": \"netsecfish (VulDB User)\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A vulnerability, which was classified as critical, was found in DrayTek Vigor2960 and Vigor300B 1.5.1.4. Affected is an unknown function of the file /cgi-bin/mainfunction.cgi/apmcfgupload of the component Web Management Interface. The manipulation of the argument session leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.5.1.5 is able to address this issue. It is recommended to upgrade the affected component.\"}, {\"lang\": \"de\", \"value\": \"Es wurde eine Schwachstelle in DrayTek Vigor2960 and Vigor300B 1.5.1.4 gefunden. Sie wurde als kritisch eingestuft. Es betrifft eine unbekannte Funktion der Datei /cgi-bin/mainfunction.cgi/apmcfgupload der Komponente Web Management Interface. Durch die Manipulation des Arguments session mit unbekannten Daten kann eine os command injection-Schwachstelle ausgenutzt werden. Der Angriff kann \\u00fcber das Netzwerk erfolgen. Der Exploit steht zur \\u00f6ffentlichen Verf\\u00fcgung. Ein Aktualisieren auf die Version 1.5.1.5 vermag dieses Problem zu l\\u00f6sen. Als bestm\\u00f6gliche Massnahme wird das Einspielen eines Upgrades empfohlen.\"}], \"metrics\": [{\"cvssV4_0\": {\"baseScore\": 6.9, \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N\", \"version\": \"4.0\"}}, {\"cvssV3_1\": {\"baseScore\": 7.3, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L\", \"version\": \"3.1\"}}, {\"cvssV3_0\": {\"baseScore\": 7.3, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L\", \"version\": \"3.0\"}}, {\"cvssV2_0\": {\"baseScore\": 7.5, \"vectorString\": \"AV:N/AC:L/Au:N/C:P/I:P/A:P\", \"version\": \"2.0\"}}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-78\", \"description\": \"OS Command Injection\", \"lang\": \"en\", \"type\": \"CWE\"}]}, {\"descriptions\": [{\"cweId\": \"CWE-77\", \"description\": \"Command Injection\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2024-12-27T16:00:13.600Z\", \"orgId\": \"1af790b2-7ee1-4545-860a-a788eba489b5\", \"shortName\": \"VulDB\"}, \"references\": [{\"name\": \"VDB-289380 | DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injection\", \"tags\": [\"vdb-entry\", \"technical-description\"], \"url\": \"https://vuldb.com/?id.289380\"}, {\"name\": \"VDB-289380 | CTI Indicators (IOB, IOC, TTP, IOA)\", \"tags\": [\"signature\", \"permissions-required\"], \"url\": \"https://vuldb.com/?ctiid.289380\"}, {\"name\": \"Submit #468795 | DrayTek Vigor2960, Vigor300B 1.5.1.4 Command Injection\", \"tags\": [\"third-party-advisory\"], \"url\": \"https://vuldb.com/?submit.468795\"}, {\"tags\": [\"exploit\"], \"url\": \"https://netsecfish.notion.site/Command-Injection-in-apmcfgupload-endpoint-for-DrayTek-Gateway-Devices-1676b683e67c8040b7f1f0ffe29ce18f?pvs=4\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2024-12-27T00:00:00.000Z\", \"value\": \"Advisory disclosed\"}, {\"lang\": \"en\", \"time\": \"2024-12-27T01:00:00.000Z\", \"value\": \"VulDB entry created\"}, {\"lang\": \"en\", \"time\": \"2024-12-27T09:09:00.000Z\", \"value\": \"VulDB entry last update\"}], \"title\": \"DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injection\"}}, \"cveMetadata\": {\"assignerOrgId\": \"1af790b2-7ee1-4545-860a-a788eba489b5\", \"assignerShortName\": \"VulDB\", \"cveId\": \"CVE-2024-12987\", \"datePublished\": \"2024-12-27T16:00:13.600Z\", \"dateReserved\": \"2024-12-27T08:03:52.921Z\", \"dateUpdated\": \"2025-10-21T22:55:33.312Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.1\"}"},{"alert":0,"cve":"CVE-2024-12987","id":5329,"kind":"epss","observed_at":1793722800,"payload":"{\"date\": \"2026-11-03\", \"epss\": 0.98163, \"percentile\": 0.99914}"},{"alert":0,"cve":"CVE-2024-12987","id":3111,"kind":"epss","observed_at":1793665375,"payload":"{\"date\": \"2026-11-02\", \"epss\": 0.98163, \"percentile\": 0.99913}"},{"alert":1,"cve":"CVE-2024-12987","id":424,"kind":"kev","observed_at":1793665375,"payload":"{\"cveID\": \"CVE-2024-12987\", \"cwes\": [\"CWE-78\"], \"dateAdded\": \"2025-05-15\", \"dueDate\": \"2025-06-05\", \"forensicTriage\": \"No\", \"knownRansomwareCampaignUse\": \"Unknown\", \"notes\": \"https://fw.draytek.com.tw/Vigor2960/Firmware/v1.5.1.5/DrayTek_Vigor2960_V1.5.1.5_01release-note.pdf ; https://fw.draytek.com.tw/Vigor300B/Firmware/v1.5.1.5/DrayTek_Vigor300B_V1.5.1.5_01release-note.pdf ; https://fw.draytek.com.tw/Vigor3900/Firmware/v1.5.1.5/DrayTek_Vigor3900_V1.5.1.5_01release-note.pdf ; https://nvd.nist.gov/vuln/detail/CVE-2024-12987\", \"product\": \"Vigor Routers\", \"requiredAction\": \"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.\", \"shortDescription\": \"DrayTek Vigor2960, Vigor300B, and Vigor3900 routers contain an OS command injection vulnerability due to an unknown function of the file /cgi-bin/mainfunction.cgi/apmcfgupload of the component web management interface.\", \"vendorProject\": \"DrayTek\", \"vulnerabilityName\": \"DrayTek Vigor Routers OS Command Injection Vulnerability\"}"}],"record":{"affected":[{"modules":["Web Management Interface"],"product":"Vigor2960","vendor":"DrayTek","versions":[{"status":"affected","version":"1.5.1.4"}]},{"modules":["Web Management Interface"],"product":"Vigor300B","vendor":"DrayTek","versions":[{"status":"affected","version":"1.5.1.4"}]}],"cna":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2024-12987","options":[{"Exploitation":"active"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2025-05-17T03:56:02.764155Z","version":"2.0.3"},"type":"ssvc"}},{"other":{"content":{"dateAdded":"2025-05-15","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-12987"},"type":"kev"}}],"providerMetadata":{"dateUpdated":"2025-10-21T22:55:33.312Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-12987"}],"timeline":[{"lang":"en","time":"2025-05-15T00:00:00.000Z","value":"CVE-2024-12987 added to CISA KEV"}],"title":"CISA ADP Vulnrichment"},{"providerMetadata":{"dateUpdated":"2025-05-15T00:13:26.288Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"url":"https://fw.draytek.com.tw/Vigor3900/Firmware/v1.5.1.5/DrayTek_Vigor3900_V1.5.1.5_01release-note.pdf"},{"url":"https://fw.draytek.com.tw/Vigor2960/Firmware/v1.5.1.5/DrayTek_Vigor2960_V1.5.1.5_01release-note.pdf"},{"url":"https://fw.draytek.com.tw/Vigor300B/Firmware/v1.5.1.5/DrayTek_Vigor300B_V1.5.1.5_01release-note.pdf"}],"title":"CVE Program Container","x_generator":{"engine":"ADPogram 0.0.1"}}],"cna":{"affected":[{"modules":["Web Management Interface"],"product":"Vigor2960","vendor":"DrayTek","versions":[{"status":"affected","version":"1.5.1.4"}]},{"modules":["Web Management Interface"],"product":"Vigor300B","vendor":"DrayTek","versions":[{"status":"affected","version":"1.5.1.4"}]}],"credits":[{"lang":"en","type":"reporter","value":"netsecfish (VulDB User)"}],"descriptions":[{"lang":"en","value":"A vulnerability, which was classified as critical, was found in DrayTek Vigor2960 and Vigor300B 1.5.1.4. Affected is an unknown function of the file /cgi-bin/mainfunction.cgi/apmcfgupload of the component Web Management Interface. The manipulation of the argument session leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.5.1.5 is able to address this issue. It is recommended to upgrade the affected component."},{"lang":"de","value":"Es wurde eine Schwachstelle in DrayTek Vigor2960 and Vigor300B 1.5.1.4 gefunden. Sie wurde als kritisch eingestuft. Es betrifft eine unbekannte Funktion der Datei /cgi-bin/mainfunction.cgi/apmcfgupload der Komponente Web Management Interface. Durch die Manipulation des Arguments session mit unbekannten Daten kann eine os command injection-Schwachstelle ausgenutzt werden. Der Angriff kann \u00fcber das Netzwerk erfolgen. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung. Ein Aktualisieren auf die Version 1.5.1.5 vermag dieses Problem zu l\u00f6sen. Als bestm\u00f6gliche Massnahme wird das Einspielen eines Upgrades empfohlen."}],"metrics":[{"cvssV4_0":{"baseScore":6.9,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","version":"4.0"}},{"cvssV3_1":{"baseScore":7.3,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","version":"3.1"}},{"cvssV3_0":{"baseScore":7.3,"baseSeverity":"HIGH","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","version":"3.0"}},{"cvssV2_0":{"baseScore":7.5,"vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","version":"2.0"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-78","description":"OS Command Injection","lang":"en","type":"CWE"}]},{"descriptions":[{"cweId":"CWE-77","description":"Command Injection","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2024-12-27T16:00:13.600Z","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB"},"references":[{"name":"VDB-289380 | DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injection","tags":["vdb-entry","technical-description"],"url":"https://vuldb.com/?id.289380"},{"name":"VDB-289380 | CTI Indicators (IOB, IOC, TTP, IOA)","tags":["signature","permissions-required"],"url":"https://vuldb.com/?ctiid.289380"},{"name":"Submit #468795 | DrayTek Vigor2960, Vigor300B 1.5.1.4 Command Injection","tags":["third-party-advisory"],"url":"https://vuldb.com/?submit.468795"},{"tags":["exploit"],"url":"https://netsecfish.notion.site/Command-Injection-in-apmcfgupload-endpoint-for-DrayTek-Gateway-Devices-1676b683e67c8040b7f1f0ffe29ce18f?pvs=4"}],"timeline":[{"lang":"en","time":"2024-12-27T00:00:00.000Z","value":"Advisory disclosed"},{"lang":"en","time":"2024-12-27T01:00:00.000Z","value":"VulDB entry created"},{"lang":"en","time":"2024-12-27T09:09:00.000Z","value":"VulDB entry last update"}],"title":"DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injection"}},"cveMetadata":{"assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","assignerShortName":"VulDB","cveId":"CVE-2024-12987","datePublished":"2024-12-27T16:00:13.600Z","dateReserved":"2024-12-27T08:03:52.921Z","dateUpdated":"2025-10-21T22:55:33.312Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"cna_checked":1794241201,"cve":"CVE-2024-12987","description":"A vulnerability, which was classified as critical, was found in DrayTek Vigor2960 and Vigor300B 1.5.1.4. Affected is an unknown function of the file /cgi-bin/mainfunction.cgi/apmcfgupload of the component Web Management Interface. The manipulation of the argument session leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.5.1.5 is able to address this issue. It is recommended to upgrade the affected component.","epss":{"date":"2026-11-12","epss":0.98223,"percentile":0.99916},"epss_checked":1794522003,"first_seen":1793665375,"kev":{"cveID":"CVE-2024-12987","cwes":["CWE-78"],"dateAdded":"2025-05-15","dueDate":"2025-06-05","forensicTriage":"No","knownRansomwareCampaignUse":"Unknown","notes":"https://fw.draytek.com.tw/Vigor2960/Firmware/v1.5.1.5/DrayTek_Vigor2960_V1.5.1.5_01release-note.pdf ; https://fw.draytek.com.tw/Vigor300B/Firmware/v1.5.1.5/DrayTek_Vigor300B_V1.5.1.5_01release-note.pdf ; https://fw.draytek.com.tw/Vigor3900/Firmware/v1.5.1.5/DrayTek_Vigor3900_V1.5.1.5_01release-note.pdf ; https://nvd.nist.gov/vuln/detail/CVE-2024-12987","product":"Vigor Routers","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","shortDescription":"DrayTek Vigor2960, Vigor300B, and Vigor3900 routers contain an OS command injection vulnerability due to an unknown function of the file /cgi-bin/mainfunction.cgi/apmcfgupload of the component web management interface.","vendorProject":"DrayTek","vulnerabilityName":"DrayTek Vigor Routers OS Command Injection Vulnerability"},"kev_checked":1794522003,"products":"DrayTek Vigor2960, DrayTek Vigor300B","references":["https://vuldb.com/?id.289380","https://vuldb.com/?ctiid.289380","https://vuldb.com/?submit.468795","https://netsecfish.notion.site/Command-Injection-in-apmcfgupload-endpoint-for-DrayTek-Gateway-Devices-1676b683e67c8040b7f1f0ffe29ce18f?pvs=4","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-12987","https://fw.draytek.com.tw/Vigor3900/Firmware/v1.5.1.5/DrayTek_Vigor3900_V1.5.1.5_01release-note.pdf","https://fw.draytek.com.tw/Vigor2960/Firmware/v1.5.1.5/DrayTek_Vigor2960_V1.5.1.5_01release-note.pdf","https://fw.draytek.com.tw/Vigor300B/Firmware/v1.5.1.5/DrayTek_Vigor300B_V1.5.1.5_01release-note.pdf"],"score":{"baseScore":6.9,"baseSeverity":"MEDIUM","provider":"VulDB","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","version":"4.0"},"solutions":"","state":"PUBLISHED","title":"DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injection","updated_at":1794500401,"workarounds":""},"sources":[]}