Lucene search
China National Vulnerability DatabaseCNVD-2021-81963HistoryOct 14, 2021 - 12:00 a.m.
Draytek VigorConnect Arbitrary File Upload and Directory Traversal Vulnerability
2021-10-1400:00:00
China National Vulnerability Database
www.cnvd.org.cn
4
0.005 Low
EPSS
Percentile
76.6%
VigorConnect is the local network management software for DrayTek devices.An arbitrary file upload and directory traversal vulnerability exists in the file upload functionality of the DownloadFileServlet in Draytek VigorConnect version 1.6.0-B3. An attacker could exploit the vulnerability to upload files to any location on the target operating system with root privileges.
Related
cvelist
cvelist
CVE-2021-20125
2021-10-13 15:48:08
cve
cve
CVE-2021-20125
2021-10-13 16:15:07
nvd
nvd
CVE-2021-20125
2021-10-13 16:15:07
checkpoint_advisories
checkpoint_advisories
Draytek VigorConnect Arbitrary File Upload (CVE-2021-20125)
2021-11-17 00:00:00
prion
prion
Directory traversal
2021-10-13 16:15:00