CVE-2025-44643
Last modified
CVE-2025-44643 is a high-severity vulnerability rated 8.6/10 on the CVSS scale. Certain Draytek products are affected by Insecure Configuration. This affects AP903 v1.4.18 and AP912C v1.4.9 and AP918R v1.4.9. EPSS estimates a 0.25% chance of exploitation in the next 30 days.
Description
Certain Draytek products are affected by Insecure Configuration. This affects AP903 v1.4.18 and AP912C v1.4.9 and AP918R v1.4.9. The setting of the password property in the ripd.conf configuration file sets a hardcoded weak password, posing a security risk. An attacker with network access could exploit this to gain unauthorized control over the routing daemon, potentially altering network routes or intercepting traffic.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2025-44643?
How severe is CVE-2025-44643?
How do I fix CVE-2025-44643?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-44614Tinxy WiFi Lock Controller v1 RF was discovered to store use…7.5
- CVE-2025-44619Tinxy WiFi Lock Controller v1 RF was discovered to be config…9.1
- CVE-2025-4462A vulnerability, which was classified as critical, has been …8.8
- CVE-2025-4463A vulnerability, which was classified as critical, was found…9.8
- CVE-2025-44635There are multiple unauthorized remote command execution vul…9.8
- CVE-2025-4464A vulnerability has been found in itsourcecode Gym Managemen…9.8
- CVE-2025-44647In TRENDnet TEW-WLC100P 2.03b03, the i_dont_care_about_secur…7.3
- CVE-2025-44649In the configuration file of racoon in the TRENDnet TEW-WLC1…7.5
- CVE-2025-4465A vulnerability was found in itsourcecode Gym Management Sys…9.8
- CVE-2025-44650In Netgear R7000 V1.3.1.64_10.1.36 and EAX80 V1.0.1.70_1.0.2…7.5
- CVE-2025-44651In TRENDnet TPL-430AP FW1.0, the USERLIMIT_GLOBAL option is …7.5
- CVE-2025-44652In Netgear RAX30 V1.0.10.94_3, the USERLIMIT_GLOBAL option i…7.5
Are you affected by CVE-2025-44643?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST