Lucene search
+L

6 matches found

CISA KEV Catalog
CISA KEV Catalog
•added 2024/09/03 12:00 a.m.•92 views

Draytek VigorConnect Path Traversal Vulnerability

Draytek VigorConnect contains a path traversal vulnerability in the file download functionality of the WebServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges...

7.8CVSS6.9AI score0.96308EPSS
SaveIn wildExploits2
VulnCheck KEV
VulnCheck KEV
•added 2024/09/03 12:00 a.m.•13 views

VulnCheck KEV: CVE-2021-20124

Draytek VigorConnect contains a path traversal vulnerability in the file download functionality of the WebServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges...

7.8CVSS7.8AI score0.96308EPSS
SaveIn wildExploits2References287
NVD
NVD
•added 2021/10/13 4:15 p.m.•25 views

CVE-2021-20124

A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the WebServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges...

7.8CVSS0.96308EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2021/10/13 3:48 p.m.•54 views

CVE-2021-20124

A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the WebServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges...

7.6AI score0.96308EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
•added 2021/10/13 3:48 p.m.•37 views

CVE-2021-20124

A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the WebServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges...

6.7AI score0.96308EPSS
SaveExploits2References1
attackerkb
attackerkb
•added 2021/10/13 12:00 a.m.•25 views

CVE-2021-20124

A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the WebServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges. Recent...

7.8CVSS6.8AI score0.96308EPSS
SaveIn wildExploits2References2
Rows per page
Query Builder