CVE-2021-20123: Draytek VigorConnect Path Traversal Vulnerability
A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the DownloadFileServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges.
Other sources
Draytek VigorConnect contains a path traversal vulnerability in the DownloadFileServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges.
— CISA
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Draytek VigorConnect 1.6.0-B3from your environment.Discontinue use of the product if mitigations are unavailable (stop using/uninstall the affected Draytek VigorConnect 1.6.0-B3 instance).
Event History
Frequently Asked Questions
What is the vulnerability ID for this local file inclusion vulnerability?
The vulnerability ID for this local file inclusion vulnerability is CVE-2021-20123.
What is the severity level of CVE-2021-20123?
CVE-2021-20123 has a severity level of 7.5 (high).
What is the affected software for CVE-2021-20123?
The affected software for CVE-2021-20123 is Draytek VigorConnect 1.6.0-B3.
How does CVE-2021-20123 work?
CVE-2021-20123 allows an unauthenticated attacker to download arbitrary files with root privileges by exploiting the file download functionality of the DownloadFileServlet endpoint in Draytek VigorConnect 1.6.0-B3.
Is there a fix available for CVE-2021-20123?
Yes, it is recommended to upgrade to a fixed version of Draytek VigorConnect to mitigate CVE-2021-20123.