High severity · published Oct 13, 2021
CVE-2021-20123
Draytek VigorConnect Path Traversal Vulnerability
In wildKEV
7.5
CVSS
89.7%
EPSS
Yes
On KEV
Description
A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the DownloadFileServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)89.7% · higher than 100% of CVEs
Exploited in the wildYes
CISA KEVListed Sep 3, 2024
Federal remediation dueSep 24, 2024
Ransomware campaign useNot known
Affected products
Which versions
DV
Draytek VigorConnect ·
1.6.0-B3 · source: vendor
VI
Vigorconnect · Draytek
1.6.0 · source: NVD, CISA, KEV
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-20123
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-20123
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
x_refsource_MISC
https://www.tenable.com/security/research/tra-2021-42
More from Draytek VigorConnect
7.5
CVE-2021-20124
Draytek VigorConnect Path Traversal Vulnerability