Draytek VigorConnect routers present local file inclusion vulnerabilities (CVE-2021-20123, CVE-2021-20124), which allow unauthenticated attackers to download sensitive system files with root privileges. These vulnerabilities pose a serious risk of data breach and system compromise and are actively being exploited in real-world environments.
| Product | vigorconnect |
| Date | 2024-09-11 09:23:36 |
Technical summary
Draytek VigorConnect routers are vulnerable to local file inclusion exploits (CVE-2021-20123, CVE-2021-20124), which allow unauthenticated attackers to download sensitive system files with root privileges. These vulnerabilities entail serious risks of data breach and system compromise and are actively being exploited in real-world environments.
Protect your organisation with Threat Intelligence and Digital Risk Protection.
Choose ISGroup for a practical, tailored engagement:
- A focused assessment of your environment and requirements
- Clear findings with a prioritised, actionable roadmap
- Direct support from experienced specialists through remediation and implementation