CVE-2024-12987

creationtimestamp| type| source ---|---|--- 2024-12-27 16:15:55+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lecf5im54q2e 2024-12-27 17:41:58+00:00| seen| https://t.me/cvedetector/13786 2025-01-01 05:22:07+00:00| published-proof-of-concept| https://t.me/proxybar/2469...

CVE-2024-12987 DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injection

A vulnerability, which was classified as critical, was found in DrayTek Vigor2960 and Vigor300B 1.5.1.4. Affected is an unknown function of the file /cgi-bin/mainfunction.cgi/apmcfgupload of the component Web Management Interface. The manipulation of the argument session leads to os command...

CVE-2024-12987

CVE-2024-12987 affects DrayTek Vigor2960 and Vigor300B running firmware 1.5.1.4, where the Web Management Interface endpoint /cgi-bin/mainfunction.cgi/apmcfgupload processes the session parameter in an insecure way, enabling OS command injection. The issue is exploitable remotely and has public e...