Lucene search
TenableCVELIST:CVE-2021-20123HistoryOct 13, 2021 - 3:47 p.m.
CVE-2021-20123
2021-10-1315:47:58
tenable
www.cve.org
0.014 Low
EPSS
Percentile
86.6%
A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the DownloadFileServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges.
CNA Affected
[
{
"product": "Draytek VigorConnect",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "1.6.0-B3"
}
]
}
]Related
nessus
nessus
Draytek VigorConnect LFI (CVE-2021-20123)
2021-11-08 00:00:00
cnvd
cnvd
Draytek VigorConnect Local File Inclusion Vulnerability (CNVD-2021-81961)
2021-10-14 00:00:00
nvd
nvd
CVE-2021-20123
2021-10-13 16:15:07
cve
cve
CVE-2021-20123
2021-10-13 16:15:07
prion
prion
Remote file inclusion
2021-10-13 16:15:00
checkpoint_advisories
checkpoint_advisories
Draytek VigorConnect Directory Traversal (CVE-2021-20123)
2021-11-11 00:00:00
nuclei
nuclei
Draytek VigorConnect 1.6.0-B - Local File Inclusion
2022-05-13 09:07:21