CVE-2021-20123 1

Vulnerability (CVE)

CVE-2021-20123: Draytek Vigor Connect Path Traversal Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Sep 03, 2024

Draytek VigorConnect contains a path traversal vulnerability in the DownloadFileServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges.

Vulnerabilities & Patching