Actively exploited in the wild
Draytek VigorConnect Path Traversal Vulnerability
DrayTek - VigorConnect · Listed in the CISA KEV since 2024-09-03. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CVE-2021-20124
HighCVSS 7.5KEVSummary
A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the WebServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges.
Risk Assessment
The risk is that an attacker can access sensitive system files such as passwords, private keys, and configurations, potentially leading to full device compromise.
Recommendation
It is recommended to immediately update Draytek VigorConnect to the latest version that includes the fix. Also restrict access to the management interface to trusted networks only.
Other vulnerabilities in Draytek VigorConnect
Original NVD description (English source)
A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the WebServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges.