Known vulnerabilities in VigorConnect

Vendor: DrayTek Corp.
Software: VigorConnect
Software CPE: cpe:2.3:a:draytek_corp:vigorconnect:*:*:*:*:*:*:*:*
Website: https://www.draytek.co.uk
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 2
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting VigorConnect VigorConnect is affected by 2 known vulnerabilities: 2 high Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU96749 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-20124		 CWE-22 High
No
Exploited
 1.6.1 03.09.2024 SB2021101348
#VU96748 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-20123		 CWE-22 High
No
Exploited
 1.6.1 03.09.2024 SB2021101348