Known Exploited Vulnerabilities September 03, 2024 · CISA KEV Catalog

CVE-2021-20124: Draytek Vigor Connect Path Traversal Vulnerability

Draytek VigorConnect contains a path traversal vulnerability in the file download functionality of the WebServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2021-20124 DrayTek
Related: CVE-2024-12987: Dray Tek Vigor Routers OS Command Injection Vulnerability Known Exploited Vulnerabilities · May 15, 2025
CVE-2020-15415: Dray Tek Multiple Vigor Routers OS Command Injection Vulnerability Known Exploited Vulnerabilities · Sep 30, 2024
CVE-2021-20123: Draytek Vigor Connect Path Traversal Vulnerability Known Exploited Vulnerabilities · Sep 03, 2024