CyberSecBulletin

Draytek VigorConnect vulnerabilities

We track 2 vulnerabilities in Draytek VigorConnect products. 2 are rated high or critical, and 2 have been exploited in real attacks. The most recent was published on October 13, 2021.

2vulnerabilities
0critical
2high
2exploited
7.5average CVSS score

Latest Draytek VigorConnect vulnerabilities

  • 7.5 High severity

    Draytek VigorConnect Path Traversal Exploited

    CVE-2021-20124Draytek VigorConnectEPSS 95.9%

    A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the WebServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating

  • 7.5 High severity

    Draytek VigorConnect Path Traversal Exploited

    CVE-2021-20123Draytek VigorConnectEPSS 90.3%

    A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the DownloadFileServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying o