Vulnerabilities > Draytek > Vigorconnect > Critical

DATE CVE VULNERABILITY TITLE RISK
2021-10-13 CVE-2021-20125 Unrestricted Upload of File with Dangerous Type vulnerability in Draytek Vigorconnect 1.6.0
An arbitrary file upload and directory traversal vulnerability exists in the file upload functionality of DownloadFileServlet in Draytek VigorConnect 1.6.0-B3.
network
low complexity
draytek CWE-434
critical
10.0