Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-20124
HistoryOct 13, 2021 - 4:15 p.m.

Remote file inclusion

2021-10-1316:15:00
PRIOn knowledge base
www.prio-n.com
4

0.009 Low

EPSS

Percentile

82.6%

A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the WebServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges.

CPENameOperatorVersion
vigorconnecteq1.6.0 beta3

0.009 Low

EPSS

Percentile

82.6%