Draytek VigorConnect Path Traversal Vulnerability

Mô tả

Tham khảo

• tenable.com/security/research/tra-2021-42 · Exploit
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2021-20124

Lỗ hổng khác của vigorconnect

• CVE-2021-20129CAO 7.5An information disclosure vulnerability exists in Draytek VigorConnect 1.6.0-B3, allowing an unauthenticated attacker to export system logs.
• CVE-2021-20128TRUNG BÌNH 5.4The Profile Name field in the floor plan (Network Menu) page in Draytek VigorConnect 1.6.0-B3 was found to be vulnerable to stored XSS, as u…
• CVE-2021-20127CAO 8.1An arbitrary file deletion vulnerability exists in the file delete functionality of the Html5Servlet endpoint of Draytek VigorConnect 1.6.0-…
• CVE-2021-20126CAO 8.8Draytek VigorConnect 1.6.0-B3 lacks cross-site request forgery protections and does not sufficiently verify whether a well-formed, valid, co…
• CVE-2021-20125NGHIÊM TRỌNG 9.8An arbitrary file upload and directory traversal vulnerability exists in the file upload functionality of DownloadFileServlet in Draytek Vig…