Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-81962
HistoryOct 14, 2021 - 12:00 a.m.

Draytek VigorConnect Local File Inclusion Vulnerability

2021-10-1400:00:00
China National Vulnerability Database
www.cnvd.org.cn
5

0.009 Low

EPSS

Percentile

82.6%

VigorConnect is the local network management software for DrayTek devices.A local file inclusion vulnerability exists in the file download functionality of the WebServlet endpoint of Draytek VigorConnect version 1.6.0-B3. An attacker could exploit this vulnerability to download arbitrary files from the underlying operating system with root privileges.

0.009 Low

EPSS

Percentile

82.6%