← CVE Intelligence

CVE-2021-20123

n/a / Draytek VigorConnect PUBLISHED

Description (CNA)

A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the DownloadFileServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges.

Affected (CNA)

Vendor / productVersions
n/a / Draytek VigorConnectaffected 1.6.0-B3

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.