Login Request a demo
VI
Product
VigorConnect
by DrayTek · last CVE Oct 13, 2021
On CISA KEVExploited in the wild
7
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 1High 5Medium 1Low 0
Severity
All severities7Critical1High5Medium1Low0
Exploitation
On CISA KEV2Exploited in the wild2
Watch

Add VigorConnect to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-20124
In wildKEV
7.5
96%
Oct 13
Draytek VigorConnect Path Traversal Vulnerability
Affected: 1.6.0
CVE-2021-20123
In wildKEV
7.5
90%
Oct 13
Draytek VigorConnect Path Traversal Vulnerability
Affected: 1.6.0
CVE-2021-20126
8.8
1%
Oct 13
Draytek VigorConnect 1.6.0-B3 lacks cross-site request forgery protections and does not sufficiently verify whether a well-formed, valid, consistent request was intentionally…
Affected: 1.6.0
CVE-2021-20127
8.1
1%
Oct 13
An arbitrary file deletion vulnerability exists in the file delete functionality of the Html5Servlet endpoint of Draytek VigorConnect 1.6.0-B3
Affected: 1.6.0
CVE-2021-20129
7.5
2%
Oct 13
An information disclosure vulnerability exists in Draytek VigorConnect 1.6.0-B3, allowing an unauthenticated attacker to export system logs
Affected: 1.6.0
Showing 5