Lucene search
PRIOn knowledge basePRION:CVE-2021-20123HistoryOct 13, 2021 - 4:15 p.m.
Remote file inclusion
2021-10-1316:15:00
PRIOn knowledge base
www.prio-n.com
3
0.014 Low
EPSS
Percentile
86.6%
A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the DownloadFileServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges.
| CPE | Name | Operator | Version |
|---|---|---|---|
| vigorconnect | eq | 1.6.0 beta3 |
Related
nessus
nessus
Draytek VigorConnect LFI (CVE-2021-20123)
2021-11-08 00:00:00
cve
cve
CVE-2021-20123
2021-10-13 16:15:07
cnvd
cnvd
Draytek VigorConnect Local File Inclusion Vulnerability (CNVD-2021-81961)
2021-10-14 00:00:00
nvd
nvd
CVE-2021-20123
2021-10-13 16:15:07
checkpoint_advisories
checkpoint_advisories
Draytek VigorConnect Directory Traversal (CVE-2021-20123)
2021-11-11 00:00:00
nuclei
nuclei
Draytek VigorConnect 1.6.0-B - Local File Inclusion
2022-05-13 09:07:21
cvelist
cvelist
CVE-2021-20123
2021-10-13 15:47:58