Strix
26.1K

CVE-2023-33778

CRITICALCVSS 9.8/10EPSS 0.60%

Last modified

CVE-2023-33778 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. Draytek Vigor Routers firmware versions below 3.9.6/4.2.4, Access Points firmware versions below v1.4.0, Switches firmware versions below 2.6.7, and Myvigor firmware versions below 2.3.2 were discovered to use hardcoded encryption keys which allows attackers to bind any affected device to their own account. Attackers are then able to create WCF and DrayDDNS licenses and synchronize them from the website.. EPSS estimates a 0.60% chance of exploitation in the next 30 days.

Description

Draytek Vigor Routers firmware versions below 3.9.6/4.2.4, Access Points firmware versions below v1.4.0, Switches firmware versions below 2.6.7, and Myvigor firmware versions below 2.3.2 were discovered to use hardcoded encryption keys which allows attackers to bind any affected device to their own account. Attackers are then able to create WCF and DrayDDNS licenses and synchronize them from the website.

Metrics

CVSS 3.1
9.8/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Probability
0.60%

44.1th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
DraytekMyvigor< 2.3.2
DraytekVigorswitch Pq2200xb Firmware< 2.6.7
DraytekVigorswitch Pq2121x Firmware< 2.6.7
DraytekVigorswitch P2540xs Firmware< 2.6.7
DraytekVigorswitch P2280x Firmware< 2.6.7
DraytekVigorswitch P2100 Firmware< 2.6.7
DraytekVigorswitch Q2200x Firmware< 2.6.7
DraytekVigorswitch Q2121x Firmware< 2.6.7
DraytekVigorswitch G2540xs Firmware< 2.6.7
DraytekVigorswitch G2280x Firmware< 2.6.7
DraytekVigorswitch G2121 Firmware< 2.6.7
DraytekVigorswitch G2100 Firmware< 2.6.7
DraytekVigorswitch Fx2120 Firmware< 2.6.7
DraytekVigorswitch P1282 Firmware< 2.6.7
DraytekVigorswitch G1282 Firmware< 2.6.7
DraytekVigorswitch G1085 Firmware< 2.6.7
DraytekVigorswitch G1080 Firmware< 2.6.7
DraytekVigorap 903 Firmware< 1.4.0
DraytekVigorap 912c Firmware< 1.4.0
DraytekVigorap 918r Firmware< 1.4.0
DraytekVigorap 1060c Firmware< 1.4.0
DraytekVigorap 906 Firmware< 1.4.0
DraytekVigorap 960c Firmware< 1.4.0
DraytekVigorap 1000c Firmware< 1.4.0
DraytekVigor2766ac Firmware< 3.9.6
DraytekVigor2766ac Firmware>= 4.0.0, < 4.2.4
DraytekVigor2766ax Firmware< 3.9.6
DraytekVigor2766ax Firmware>= 4.0.0, < 4.2.4
DraytekVigor2766vac Firmware< 3.9.6
DraytekVigor2766vac Firmware>= 4.0.0, < 4.2.4
DraytekVigor2765ax Firmware< 3.9.6
DraytekVigor2765ax Firmware>= 4.0.0, < 4.2.4
DraytekVigor2765vac Firmware< 3.9.6
DraytekVigor2765vac Firmware>= 4.0.0, < 4.2.4
DraytekVigor2765ac Firmware< 3.9.6
DraytekVigor2765ac Firmware>= 4.0.0, < 4.2.4
DraytekVigor2763ac Firmware< 3.9.6
DraytekVigor2763ac Firmware>= 4.0.0, < 4.2.4
DraytekVigor2620l Firmware< 3.9.6
DraytekVigor2620l Firmware>= 4.0.0, < 4.2.4
DraytekVigor2620ln Firmware< 3.9.6
DraytekVigor2620ln Firmware>= 4.0.0, < 4.2.4
DraytekVigorlte 200n Firmware< 3.9.6
DraytekVigorlte 200n Firmware>= 4.0.0, < 4.2.4
DraytekVigor2915ac Firmware< 3.9.6
DraytekVigor2915ac Firmware>= 4.0.0, < 4.2.4
DraytekVigor2135ac Firmware< 3.9.6
DraytekVigor2135ac Firmware>= 4.0.0, < 4.2.4
DraytekVigor2135ax Firmware< 3.9.6
DraytekVigor2135ax Firmware>= 4.0.0, < 4.2.4

Showing 50 of 120 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2023-33778?
Draytek Vigor Routers firmware versions below 3.9.6/4.2.4, Access Points firmware versions below v1.4.0, Switches firmware versions below 2.6.7, and Myvigor firmware versions below 2.3.2 were discovered to use hardcoded encryption keys which allows attackers to bind any affected device to their own account. Attackers are then able to create WCF and DrayDDNS licenses and synchronize them from the website.
How severe is CVE-2023-33778?
CVE-2023-33778 has a CVSS score of 9.8/10 (CRITICAL severity). The EPSS model estimates a 0.60% probability of exploitation in the next 30 days.
How do I fix CVE-2023-33778?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2023-33778?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST