CVE-2023-33778 - Draytek Vigor2862b Firmware, Draytek Vigorswitch G1282 Firmware and Draytek Vigor2862n Firmware
Draytek Vigor Routers firmware versions below 3.9.6/4.2.4, Access Points firmware versions below v1.4.0, Switches firmware versions below 2.6.7, and Myvigor firmware versions below 2.3.2 were discovered to use hardcoded encryption keys which allows attackers to bind any affected device to their own account. Attackers are then able to create WCF and DrayDDNS licenses and synchronize them from the website.
Affected software
Draytek Vigor2862b Firmware
Draytek Vigorswitch G1282 Firmware
Draytek Vigor2862n Firmware
Draytek Vigorswitch G2100 Firmware
Draytek Vigor2866l Firmware
Draytek Vigorswitch Pq2200xb Firmware
Draytek Vigorswitch P2540xs Firmware
Draytek Vigor2865ax Firmware
Draytek Vigorap 912c Firmware
Draytek Vigor2862l Firmware
Draytek Vigor2135fvac Firmware
Draytek Vigor2927l Firmware
Draytek Vigor2926 Plus Firmware
Draytek Vigor2865vac Firmware
Draytek Vigor1000b Firmware
Draytek Vigor166 Firmware
Draytek Vigor2135ax Firmware
Draytek Vigor2832n Firmware
Draytek Vigor2927vac Firmware
Draytek Vigorswitch Q2200x Firmware
Draytek Vigor2620l Firmware
Draytek Vigorap 1060c Firmware
Draytek Vigor3910 Firmware
Draytek Vigor2927f Firmware
Draytek Vigorswitch G2121 Firmware
Draytek Vigorlte 200n Firmware
Draytek Vigor2862ln Firmware
Draytek Vigor2865ac Firmware
Draytek Vigorswitch Q2121x Firmware
Draytek Vigor2862bn Firmware
Draytek Vigor130 Firmware
Draytek Vigor2766ac Firmware
Draytek Vigor2766vac Firmware
Draytek Vigor2766ax Firmware
Draytek Vigorswitch G1080 Firmware
Draytek Vigor2927lac Firmware
Draytek Vigor2765ac Firmware
Draytek Vigor2927ac Firmware
Draytek Vigor2862vac Firmware
Draytek Vigorap 903 Firmware
Draytek Vigorswitch G2540xs Firmware
Draytek Vigorap 918r Firmware
Draytek Myvigor
Draytek Vigorswitch P1282 Firmware
Draytek Vigor2866lac Firmware
Draytek Vigor2915ac Firmware
Draytek Vigorswitch G2280x Firmware
Draytek Vigor2866vac Firmware
Draytek Vigor2865lac Firmware
Draytek Vigor2862lac Firmware
Draytek Vigor165 Firmware
Draytek Vigorap 906 Firmware
Draytek Vigor2927ax Firmware
Draytek Vigorswitch Fx2120 Firmware
Draytek Vigor2866ac Firmware
Draytek Vigor2865l Firmware
Draytek Vigor2135vac Firmware
Draytek Vigorswitch G1085 Firmware
Draytek Vigor2765ax Firmware
Draytek Vigorswitch P2100 Firmware
Draytek Vigorswitch Pq2121x Firmware
Draytek Vigor2765vac Firmware
Draytek Vigor2862ac Firmware
Draytek Vigorap 1000c Firmware
Draytek Vigor2620ln Firmware
Draytek Vigor2135ac Firmware
Draytek Vigor2962 Firmware
Draytek Vigorswitch P2280x Firmware
Draytek Vigor2763ac Firmware
Draytek Vigor2866ax Firmware
Draytek Vigor167 Firmware
Draytek Vigorap 960c Firmware