PT-2023-9803 · Draytek · Draytek Vigor Routers+3

Ji4N1Ng · Published 2023-06-01 · Updated 2025-01-09 · CVE-2023-33778

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Draytek Vigor Routers versions below 3.9.6/4.2.4 Draytek Vigor Access Points versions below v1.4.0 Draytek Vigor Switches versions below 2.6.7 Draytek Vigor Myvigor versions below 2.3.2

Description The issue is related to the use of hardcoded encryption keys in the firmware of Draytek Vigor devices. This allows attackers to bind any affected device to their own account, enabling them to create WCF and DrayDDNS licenses and synchronize them from the website. The vulnerability can be exploited remotely and may impact the confidentiality, integrity, and availability of protected information.

Recommendations For Draytek Vigor Routers versions below 3.9.6/4.2.4, update to version 3.9.6/4.2.4 or later. For Draytek Vigor Access Points versions below v1.4.0, update to version v1.4.0 or later. For Draytek Vigor Switches versions below 2.6.7, update to version 2.6.7 or later. For Draytek Vigor Myvigor versions below 2.3.2, update to version 2.3.2 or later.

Exploit

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

BDU:2024-11413

CVE-2023-33778

Affected Products

Draytek Vigor Access Points

Draytek Vigor Myvigor

Draytek Vigor Routers

Draytek Vigor Switches

References · 6

• 🔥 https://gist.github.com/Ji4n1ng/6d028709d39458f5ab95b3ea211225ef · Exploit
• https://osv.dev/vulnerability/CVE-2023-33778 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-11413 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-33778 · Security Note
• https://t.me/cvenotify/106968 · Telegram Post
• https://t.me/netlas/73 · Telegram Post