logo
Vulnerability feed
CONTRIBUTE

Vulnerability

warn

CVE-2021-20124

Reference to the description:

https://nvd.nist.gov/vuln/detail/CVE-2021-20124

Description:
A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the WebServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges.
Last updated date:
09/05/2024

Reports

alt

ACTIVELY EXPLOITED

Type:
exploitation
Confidence:
HIGH
Date of publishing:
09/03/2024
Reference url to background

https://www.cisa.gov/known-exploited-vulnerabilities-catalog

Type:
exploit
Confidence:
HIGH
Date of publishing:
10/19/2021
Vulnerability FeedContributorsAboutBlog

@inTheWild

©2024

Privacy Policy