Security Advisory

CVE-2021-20127

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-10-13 15:49:25

Last updated 2024-08-03 17:30:07

Assigner tenable

CVSS score not scored

State PUBLISHED

Description

An arbitrary file deletion vulnerability exists in the file delete functionality of the Html5Servlet endpoint of Draytek VigorConnect 1.6.0-B3. This allows an authenticated user to arbitrarily delete files in any location on the target operating system with root privileges.

← Browse all CVEs View on cve.org ↗