Exploit / PoCcriticalExploited in the wild

U.S. CISA adds Draytek VigorConnect and Kingsoft WPS Office bugs to its Known Exploited Vulnerabilities catalog

Security Affairsby @securityaffairsSep 7, 2024 · 16:19 UTC (Sep 7, 2024)2 min read4 · 2 reads

Read at securityaffairs.com

Analyze CVE-2021-20123 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2021-20123 CVE-2021-20124 CVE-2024-7262

Tags: cve-2021-20123 cve-2021-20124 cve-2024-7262 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-20124 +1 related CVE CVE-2021-20123	Unauthenticated Path Traversal File Download in DrayTek VigorConnect	7.5	96%	KEVPoC	Oct 13, 2021 KEV Sep 3, 2024
CVE-2024-7262	Path Traversal Arbitrary Library Load in Kingsoft WPS Office for Windows	9.3	3%	KEV	Aug 15, 2024 KEV Sep 3, 2024

From the original article

2 min read at securityaffairs.com

U. S. Cybersecurity and Infrastructure Security Agency (CISA) adds Draytek VigorConnect and Kingsoft WPS Office bugs to its Known Exploited Vulnerabilities catalog.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.