With patches out for three years, attackers have set their sights on a pair of vulnerabilities affecting DrayTek VigorConnect.

CVE-2021-20123, CVE-2021-20124: DrayTek Vulnerabilities Discovered by Tenable Research Added to CISA KEV

A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the DownloadFileServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges.

A local file inclusion vulnerability exists in Drayteks VigorConnect due to insufficient validation of user supplied paramaters. An unauthenticated, remote attacker can exploit this, via a specially crafted HTTP GET request, to download arbitrary files with root privileges.

Detections

Analytics

CVE-2021-20123

high

Tenable Plugins

high