--- title: "Security digest: December 27, 2024" url: https://erroneo.us/security/2024-12-27/ description: "December 27, 2024 vulnerability digest: 2 briefs (DrayTek Vigor2960/300B CVE-2024-12987: Exploited…). What to patch and who can relax." type: security-digest-day section: "Security Digest" date_published: 2024-12-27 date_modified: 2026-10-23 publisher: erroneo.us author: erroneo.us Security Desk license: All rights reserved. Quote with attribution and a link. --- # Security digest: December 27, 2024 2 editorial briefs. ## Take stock - Check exposure: DrayTek Vigor2960/300B CVE-2024-12987: Exploited Web UI RCE . Owners of DrayTek Vigor2960, Vigor300B or Vigor3900 routers on firmware below 1.5.1.5, most urgently where the web management interface faces the internet. - Check exposure: PAN-OS CVE-2024-3393: DNS Security Packet Reboots Firewalls . Teams with PAN-OS firewalls licensed for DNS Security or Advanced DNS Security, with DNS Security logging enabled, still running an affected 10.1.14+, 10.2.8+, 11.0, 11.1 or 11.2 build. - None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully. ## Editorial briefs - **Check exposure** [DrayTek Vigor2960/300B CVE-2024-12987: Exploited Web UI RCE](https://erroneo.us/security/briefs/draytek-vigor2960-300b-cve-2024-12987-command-injection-kev/index.md): Vigor2960, Vigor300B and Vigor3900 routers on firmware 1.5.1.5 or later are fixed; any unit still on 1.5.1.4 or older with its web management reachable from the internet should be upgraded today and checked for tampering. - **Check exposure** [PAN-OS CVE-2024-3393: DNS Security Packet Reboots Firewalls](https://erroneo.us/security/briefs/pan-os-dns-security-dos-cve-2024-3393/index.md): Fixed since early 2025 and a denial of service only; confirm no firewall with a DNS Security license and logging is still on an affected build, including end-of-life PAN-OS 11.0. ## Known exploited (CISA KEV) None. ## Critical advisories None. --- Source page: https://erroneo.us/security/2024-12-27/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt