Critical severity · published Jun 1, 2023
CVE-2023-33778
Draytek Vigor Routers firmware versions below 3.9.6/4.2.4, Access Points firmware versions below v1.4.0, Switches firmware versions below 2.6.7, and Myvigor firmware versions…
9.8
CVSS
0.6%
EPSS
No
On KEV
Description
Draytek Vigor Routers firmware versions below 3.9.6/4.2.4, Access Points firmware versions below v1.4.0, Switches firmware versions below 2.6.7, and Myvigor firmware versions below 2.3.2 were discovered to use hardcoded encryption keys which allows attackers to bind any affected device to their own account. Attackers are then able to create WCF and DrayDDNS licenses and synchronize them from the website.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 48% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MY
Myvigor · Draytek
before 2.3.2 · source: NVD
VF
Vigor2135ac Firmware · Draytek
before 3.9.6; 4.0.0 before 4.2.4 · source: NVD
VF
Vigor2135ax Firmware · Draytek
before 3.9.6; 4.0.0 before 4.2.4 · source: NVD
VF
Vigor2135fvac Firmware · Draytek
before 3.9.6; 4.0.0 before 4.2.4 · source: NVD
VF
Vigor2135vac Firmware · Draytek
before 3.9.6; 4.0.0 before 4.2.4 · source: NVD
VF
Vigor2620l Firmware · Draytek
before 3.9.6; 4.0.0 before 4.2.4 · source: NVD
VF
Vigor2620ln Firmware · Draytek
before 3.9.6; 4.0.0 before 4.2.4 · source: NVD
VF
Vigor2763ac Firmware · Draytek
before 3.9.6; 4.0.0 before 4.2.4 · source: NVD
VF
Vigor2765ac Firmware · Draytek
before 3.9.6; 4.0.0 before 4.2.4 · source: NVD
VF
Vigor2765ax Firmware · Draytek
before 3.9.6; 4.0.0 before 4.2.4 · source: NVD
VF
Vigor2765vac Firmware · Draytek
before 3.9.6; 4.0.0 before 4.2.4 · source: NVD
VF
Vigor2766ac Firmware · Draytek
before 3.9.6; 4.0.0 before 4.2.4 · source: NVD