CyberRota Analysis
AI analysis pending.
CISA KEV Details
Status: This CVE is listed in CISA's Known Exploited Vulnerabilities catalog.
Ransomware use: Unknown
Added to KEV: 2024-09-03
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CVE
CVE-2021-20124
Severity
HIGH
CVSS
7.5
EPSS
69.25%
Original NVD Description
A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the WebServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges.
Related CVEs
Other vulnerabilities affecting the same vendor(s)