PT-2021-8120 · Draytek · Draytek Vigorconnect

Derrie Sutton

+1

·

Published

2021-08-30

·

Updated

2025-04-02

·

CVE-2021-20123

CVSS v2.0

7.8

High

VectorAV:N/AC:L/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions Draytek VigorConnect version 1.6.0-B3
Description A local file inclusion vulnerability exists in the file download functionality of the "DownloadFileServlet" endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges. The issue is related to incorrect restriction of the directory path name with limited access. Exploitation of the vulnerability may allow a remote attacker to load arbitrary files with root privileges.
Recommendations For Draytek VigorConnect version 1.6.0-B3, consider disabling the DownloadFileServlet endpoint until a patch is available to prevent exploitation. Restrict access to the file download functionality to minimize the risk of arbitrary file downloads. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BDU:2024-07874
CVE-2021-20123

Affected Products

Draytek Vigorconnect