Design/Logic Flaw

The Profile Name field in the floor plan Network Menu page in Draytek VigorConnect 1.6.0-B3 was found to be vulnerable to stored XSS, as user input is not properly sanitized...

Remote file inclusion

A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the WebServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges...

Remote file inclusion

A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the DownloadFileServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges...

Cross site request forgery (csrf)

Draytek VigorConnect 1.6.0-B3 lacks cross-site request forgery protections and does not sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request...

Information disclosure

An information disclosure vulnerability exists in Draytek VigorConnect 1.6.0-B3, allowing an unauthenticated attacker to export system logs...

Arbitrary file deletion

An arbitrary file deletion vulnerability exists in the file delete functionality of the Html5Servlet endpoint of Draytek VigorConnect 1.6.0-B3. This allows an authenticated user to arbitrarily delete files in any location on the target operating system with root privileges...

Directory traversal

An arbitrary file upload and directory traversal vulnerability exists in the file upload functionality of DownloadFileServlet in Draytek VigorConnect 1.6.0-B3. An unauthenticated attacker could leverage this vulnerability to upload files to any location on the target operating system with root...

CVE-2021-20129

An information disclosure vulnerability exists in Draytek VigorConnect 1.6.0-B3, allowing an unauthenticated attacker to export system logs...

CVE-2021-20129

CVE-2021-20129 affects Draytek VigorConnect 1.6.0-B3. An unauthenticated attacker can export system logs via network exposure (information disclosure). Other connected sources also describe a local file inclusion risk in related endpoints (WebServlet/DownloadFileServlet) on the same version, enab...

CVE-2021-20128

The Profile Name field in the floor plan Network Menu page in Draytek VigorConnect 1.6.0-B3 was found to be vulnerable to stored XSS, as user input is not properly sanitized...

CVE-2021-20128

The CVE-2021-20128 vulnerability affects DrayTek VigorConnect 1.6.0-B3, specifically the Profile Name field in the floor plan (Network Menu) page. It is a stored XSS flaw caused by improper sanitization of user input in that field. The exploit would rely on injecting malicious script via the Prof...

CVE-2021-20127

CVE-2021-20127 affects DrayTek VigorConnect (version 1.6.0-B3) via the Html5Servlet endpoint’s file deletion feature. An authenticated user can arbitrarily delete files anywhere on the target OS with root privileges, enabling high-impact disruption and potential data loss. The vulnerability stems...

CVE-2021-20127

An arbitrary file deletion vulnerability exists in the file delete functionality of the Html5Servlet endpoint of Draytek VigorConnect 1.6.0-B3. This allows an authenticated user to arbitrarily delete files in any location on the target operating system with root privileges...

CVE-2021-20126

Draytek VigorConnect 1.6.0-B3 is affected by a cross-site request forgery vulnerability due to missing protections and insufficient verification that requests are intentional from the authenticated user. The available sources describe the issue and impacted version but do not provide exploit deta...

CVE-2021-20126

Draytek VigorConnect 1.6.0-B3 lacks cross-site request forgery protections and does not sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request...

CVE-2021-20125

An arbitrary file upload and directory traversal vulnerability exists in the file upload functionality of DownloadFileServlet in Draytek VigorConnect 1.6.0-B3. An unauthenticated attacker could leverage this vulnerability to upload files to any location on the target operating system with root...

CVE-2021-20125

CVE-2021-20125 affects Draytek VigorConnect 1.6.0-B3. The vulnerability exists in the DownloadFileServlet’s file-upload functionality, enabling an unauthenticated attacker to upload arbitrary files and perform directory traversal to places on the target OS with root privileges. This is documented...

CVE-2021-20124

A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the WebServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges...

CVE-2021-20124

A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the WebServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges...

CVE-2021-20124

Draytek VigorConnect 1.6.0-B3 is affected by an unauthenticated local file inclusion via the WebServlet file download endpoint. This allows arbitrary file download from the underlying OS (root privileges). Public advisories document a fix in VigorConnect 1.6.1; CISA/CIRCL/NCSC references corrobor...