vigorconnect vulnerabilities

2 known vulnerabilities in vigorconnect from DrayTek. 2 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Draytek VigorConnect Path Traversal Exploited

  CVE-2021-20124Oct 13, 2021Draytek VigorConnectEPSS 95.9%

  A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the WebServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating

• 7.5 High severity

  Draytek VigorConnect Path Traversal Exploited

  CVE-2021-20123Oct 13, 2021Draytek VigorConnectEPSS 90.3%

  A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the DownloadFileServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying o