PatchTheCVECVE-2024-12986: A vulnerability, which was classified as critical, has been found in DrayTek Vigor2960 and Vigor300B 1.5.1.3/1
CVE-2024-12986 is a high-severity flaw (CVSS 7.3) affecting vigor300b firmware, vigor2960 firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
A vulnerability, which was classified as critical, has been found in DrayTek Vigor2960 and Vigor300B 1.5.1.3/1.5.1.4. This issue affects some unknown processing of the file /cgi-bin/mainfunction.cgi/apmcfgupptim of the component Web Management Interface. The manipulation of the argument session leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.
Why this priority
- High severity
- EPSS top 2%: very likely to be exploited
- Public exploit reference
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2024-12986?
vigor300b firmware: upgrade to 1.5.1.5; vigor2960 firmware: upgrade to 1.5.1.5. Exact commands for each OS are on this page.
Is CVE-2024-12986 being exploited?
CVE-2024-12986 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2024-12986 affect?
CVE-2024-12986 affects vigor300b firmware, vigor2960 firmware. Severity is high (CVSS 7.3). A vulnerability, which was classified as critical, has been found in DrayTek Vigor2960 and Vigor300B 1.5.1.3/1.5.1.4. This issue affects some unknown processing of the file /cgi-bin/mainfunction.cgi/apmcfgupptim of the component Web Managem
How urgent is CVE-2024-12986?
Priority 60/100. High severity; EPSS top 2%: very likely to be exploited; Public exploit reference; Remotely exploitable, no login, no user action
Related CVEs
- CVE-2026-3040 MEDIUM 4.7 UPGRADE A vulnerability was identified in DrayTek Vigor 300B up to 1.5.1.6
- CVE-2024-43027 HIGH 8.0 UPGRADE UPGRADE DrayTek Vigor 3900 before v1.5.1.5_Beta, DrayTek Vigor 2960 before v1.5.1.5_Beta and DrayTek Vigor 300B before
- CVE-2024-12987 HIGH 7.3 EXPLOITED MITIGATE MITIGATE DrayTek Vigor Routers OS Command Injection Vulnerability