SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2023-33778

Draytek Vigor Routers firmware versions below 3.9.6/4.2.4, Access Points firmware versions below v1.4.0, Switches firmware versions below 2.6.7, and Myvigor firmware versions below 2.3.2 were discovered to use hardcoded encryption keys which allows…

CRITICAL 9.8EPSS 0.59%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.59%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Draytek Vigor Routers firmware versions below 3.9.6/4.2.4, Access Points firmware versions below v1.4.0, Switches firmware versions below 2.6.7, and Myvigor firmware versions below 2.3.2 were discovered to use hardcoded encryption keys which allows attackers to bind any affected device to their own account. Attackers are then able to create WCF and DrayDDNS licenses and synchronize them from the website.

CVSS 3.1
9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.59% probability · 47th percentile
CISA KEV
Not listed
Weakness
CWE-798
Affected
draytek/myvigor · draytek/vigorswitch pq2200xb firmware · draytek/vigorswitch pq2121x firmware · draytek/vigorswitch p2540xs firmware · draytek/vigorswitch p2280x firmware · draytek/vigorswitch p2100 firmware · draytek/vigorswitch q2200x firmware · draytek/vigorswitch q2121x firmware · draytek/vigorswitch g2540xs firmware · draytek/vigorswitch g2280x firmware · draytek/vigorswitch g2121 firmware · draytek/vigorswitch g2100 firmware · draytek/vigorswitch fx2120 firmware · draytek/vigorswitch p1282 firmware · draytek/vigorswitch g1282 firmware · draytek/vigorswitch g1085 firmware · draytek/vigorswitch g1080 firmware · draytek/vigorap 903 firmware · draytek/vigorap 912c firmware · draytek/vigorap 918r firmware · +40 more
Source
cve@mitre.org

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.