Actively exploited · Published Oct 13, 2021 · Assigned by tenable
CVE-2021-20124
High 7.5 Exploited
In plain English
A high-severity path traversal in Draytek VigorConnect. Attackers are actively exploiting it in the wild (listed by CISA on September 3, 2024). The chance it is exploited in the next 30 days is estimated at 95.9% (higher than 99.9% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei. Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CISA guidance
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Federal agencies must remediate by Sep 24, 2024.
Official description
A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the WebServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Draytek VigorConnect | 1.6.0-B3 |
Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
References
- https://www.tenable.com/security/research/tra-2021-42 x_refsource_MISC
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-20124 government-resource