CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2024-12-27
DrayTek Vigor2960 and Vigor300B Remote Command Injection Vulnerability Advisory (CVE-2024-12987)
[Affected Scope] DrayTek Vigor2960 and Vigor300B gateway devices running firmware version 1.5.1.4 or prior
[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with root privileges via the Web Management Interface, leading to full system compromise
[Mitigation] Immediately upgrade to firmware version 1.5.1.5 or higher and disable WAN-side web management access