DrayTek VigorConnect vulnerabilities

7 CVEs affecting DrayTek VigorConnect, 2 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-20129, published 2021-10-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-20124: Draytek VigorConnect Path Traversal Vulnerability, published 2021-10-13. High severity, CVSS 7.5. Actively exploited: in CISA KEV since 2024-09-03. EPSS: 96.3% chance of exploitation in the next 30 days. A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the WebServlet endpoint. An unauthenticated attacker could leverage this…
CVE-2021-20123: Draytek VigorConnect Path Traversal Vulnerability, published 2021-10-13. High severity, CVSS 7.5. Actively exploited: in CISA KEV since 2024-09-03. EPSS: 90.2% chance of exploitation in the next 30 days. A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the DownloadFileServlet endpoint. An unauthenticated attacker could leverage this…
CVE-2021-20125, published 2021-10-13. Critical severity, CVSS 9.8. EPSS: 3.9% chance of exploitation in the next 30 days. An arbitrary file upload and directory traversal vulnerability exists in the file upload functionality of DownloadFileServlet in Draytek VigorConnect 1.6.0-B3. An unauthenticated attacker could…
CVE-2021-20129, published 2021-10-13. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. An information disclosure vulnerability exists in Draytek VigorConnect 1.6.0-B3, allowing an unauthenticated attacker to export system logs.
CVE-2021-20127, published 2021-10-13. High severity, CVSS 8.1. EPSS: 1.1% chance of exploitation in the next 30 days. An arbitrary file deletion vulnerability exists in the file delete functionality of the Html5Servlet endpoint of Draytek VigorConnect 1.6.0-B3. This allows an authenticated user to arbitrarily delete…
CVE-2021-20126, published 2021-10-13. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. Draytek VigorConnect 1.6.0-B3 lacks cross-site request forgery protections and does not sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who…
CVE-2021-20128, published 2021-10-13. Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days. The Profile Name field in the floor plan (Network Menu) page in Draytek VigorConnect 1.6.0-B3 was found to be vulnerable to stored XSS, as user input is not properly sanitized.