CVE-2021-20123 Scanner
CVE-2021-20123 scanner - Local File Inclusion vulnerability in Draytek VigorConnect
Used 2.9k times · 3.4k assets checked · url
🔴
CISA Known Exploited Vulnerability
This CVE is actively exploited in the wild. CISA mandates federal agencies to patch immediately.
CVE
CVE-2021-20123
7.5
CVSShigh
Exploitable remotely over the internet · no authentication required.
Description
A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the DownloadFileServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
draytek vigorconnectvigorconnect
Updated Oct 24, 2026View on NVD →
S4E scanner
CVE history: draytek vigorconnect
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →