https://pwn.watch/i/draytek-vigor-routers-cve-2024-12987 DrayTek Vigor2960, Vigor300B, and Vigor3900 routers contain an OS command injection vulnerability due to an unknown function of the file /cgi-bin/mainfunction.cgi/apmcfgupload of the component web management interface. Added to CISA KEV on 2025-05-15. en Thu, 15 May 2025 00:00:00 GMT https://pwn.watch/i/draytek-vigor-routers-cve-2024-12987 https://pwn.watch/i/draytek-vigor-routers-cve-2024-12987#2025-05-15-f3513aa8 Thu, 15 May 2025 00:00:00 GMT medium <p>DrayTek Vigor Routers: Vigor Routers OS Command Injection Vulnerability: CISA added CVE-2024-12987 to the KEV catalog (due 2025-06-05).</p>