UnscoredCISA KEV

CVE-2024-12987

DrayTek — Vigor Routers

DrayTek Vigor Routers OS Command Injection Vulnerability. DrayTek Vigor2960, Vigor300B, and Vigor3900 routers contain an OS command injection vulnerability due to an unknown function of the file /cgi-bin/mainfunction.cgi/apmcfgupload of the component web management interface.

CVSSNot scored

EPSS98.1%

Exploit StatusConfirmed (CISA KEV)

PublishedMay 15, 2025

Last ModifiedUndated

VendorDrayTek

ProductVigor Routers

View on NVD

Vulnerability Timeline

PublishedMay 15, 2025

Added to CISA KEVMay 15, 2025

CISA Remediation DueJun 05, 2025

Seraph Context

Technology Watch Match

Available for technologies you monitor inside Seraph CTI.

Relevant Threat Actors

Surfaced automatically when a documented actor is linked to this CVE.

Sector Context

Shown when this vendor/product is relevant to your industry.

Exploitation Context

Campaign and indicator context, where Seraph analysts have published it.

More from DrayTek in the catalogue.

CVE-2020-15415Multiple Vigor RoutersPublished Sep 30, 2024 CVE-2021-20124VigorConnectPublished Sep 03, 2024 CVE-2021-20123VigorConnectPublished Sep 03, 2024

Does this affect technology you run?

Declare your technology stack inside Seraph CTI and get notified the moment a vulnerability matches it.

Explore Seraph CTI Back to Vulnerability Catalogue