CVE-2021-20129

HIGH

7.5

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2021-10-13

Last Modified2024-11-21

Data SourcesNVD

Vulnerability Description

An information disclosure vulnerability exists in Draytek VigorConnect 1.6.0-B3, allowing an unauthenticated attacker to export system logs.

📦

Draytek

= 1.6.0

The Profile Name field in the floor plan (Network Menu) page in Draytek VigorConnect 1.6.0-B3 was found to be vulnerable to stored...

An arbitrary file deletion vulnerability exists in the file delete functionality of the Html5Servlet endpoint of Draytek VigorConn...

Draytek VigorConnect 1.6.0-B3 lacks cross-site request forgery protections and does not sufficiently verify whether a well-formed,...

An arbitrary file upload and directory traversal vulnerability exists in the file upload functionality of DownloadFileServlet in D...