The vulnerability of the web interface of Draytek Vigor routers, Draytek Vigor access points, Draytek Vigor switches, and the cloud platform Draytek Vigor Myvigor arises from the use of rigidly encrypted credentials. This allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

🗓️ 23 Dec 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

Draytek Vigor interfaces use rigid credentials, risking confidentiality, integrity, and accessibility.

Reporter	Title	Published	Views	Family All 12
ATTACKERKB	CVE-2023-33778	1 Jun 202304:15	–	attackerkb
Circl	CVE-2023-33778	15 Jun 202315:17	–	circl
CNNVD	Draytek Vigor Routers 信任管理问题漏洞	1 Jun 202300:00	–	cnnvd
CVE	CVE-2023-33778	1 Jun 202300:00	–	cve
Cvelist	CVE-2023-33778	1 Jun 202300:00	–	cvelist
EUVD	EUVD-2023-37930	3 Oct 202520:07	–	euvd
NVD	CVE-2023-33778	1 Jun 202304:15	–	nvd
OSV	CVE-2023-33778	1 Jun 202304:15	–	osv
Prion	Hardcoded credentials	1 Jun 202304:15	–	prion
Positive Technologies	PT-2023-9803 · Draytek · Draytek Vigor Switches +3	1 Jun 202300:00	–	ptsecurity

Vulners

Node

draytek vigor_switch_pq2200xbRange<2.6.7

OR

draytek myvigorRange<2.3.2

OR

draytek vigor_switch_pq2121xRange<2.6.7

OR

draytek vigor_switch_p2540xsRange<2.6.7

OR

draytek vigor_switch_p2280xRange<2.6.7

OR

draytek vigor_switch_p2100Range<2.6.7

OR

draytek vigor_switch_q2200xRange<2.6.7

OR

draytek vigor_switch_q2121xRange<2.6.7

OR

draytek vigor_switch_g2540xsRange<2.6.7

OR

draytek vigor_switch_g2280xRange<2.6.7

OR

draytek vigor_switch_g2121Range<2.6.7

OR

draytek vigor_switch_g2100Range<2.6.7

OR

draytek vigor_switch_fx2120Range<2.6.7

OR

draytek vigor_switch_p1282Range<2.6.7

OR

draytek vigor_switch_g1282Range<2.6.7

OR

draytek vigor_switch_g1085Range<2.6.7

OR

draytek vigor_switch_g1080Range<2.6.7

OR

draytek vigorap_903Range<1.4.0

OR

draytek vigorap_912cRange<1.4.0

OR

draytek vigorap_918rRange<1.4.0

OR

draytek vigorap_1060cRange<1.4.0

OR

draytek vigorap_906Range<1.4.0

OR

draytek vigorap_960cRange<1.4.0

OR

draytek vigorap_1000cRange<1.4.0

OR

draytek vigor_2766acRange<3.9.6

OR

draytek vigor_2766acRange4.0.0–4.2.4

OR

draytek vigor_2766axRange<3.9.6

OR

draytek vigor_2766axRange4.0.0–4.2.4

OR

draytek vigor_2766vacRange<3.9.6

OR

draytek vigor_2766vacRange4.0.0–4.2.4

OR

draytek vigor_2765axRange<3.9.6

OR

draytek vigor_2765axRange4.0.0–4.2.4

OR

draytek vigor_2765vacRange<3.9.6

OR

draytek vigor_2765vacRange4.0.0–4.2.4

OR

draytek vigor_2765acRange<3.9.6

OR

draytek vigor_2765acRange4.0.0–4.2.4

OR

draytek vigor_2763acRange<3.9.6

OR

draytek vigor_2763acRange4.0.0–4.2.4

OR

draytek vigor_2620lRange<3.9.6

OR

draytek vigor_2620lRange4.0.0–4.2.4

OR

draytek vigor_2620lnRange<3.9.6

OR

draytek vigor_2620lnRange4.0.0–4.2.4

OR

draytek vigor_lte_200nRange<3.9.6

OR

draytek vigor_lte_200nRange4.0.0–4.2.4

OR

draytek vigor_2915acRange<3.9.6

OR

draytek vigor_2915acRange4.0.0–4.2.4

OR

draytek vigor_2135acRange<3.9.6

OR

draytek vigor_2135acRange4.0.0–4.2.4

OR

draytek vigor_2135axRange<3.9.6

OR

draytek vigor_2135axRange4.0.0–4.2.4

OR

draytek vigor_2135fvacRange<3.9.6

OR

draytek vigor_2135fvacRange4.0.0–4.2.4

OR

draytek vigor_2135vacRange<3.9.6

OR

draytek vigor_2135vacRange4.0.0–4.2.4

OR

draytek vigor_2866axRange<3.9.6

OR

draytek vigor_2866axRange4.0.0–4.2.4

OR

draytek vigor_2866vacRange<3.9.6

OR

draytek vigor_2866vacRange4.0.0–4.2.4

OR

draytek vigor_2866acRange<3.9.6

OR

draytek vigor_2866acRange4.0.0–4.2.4

OR

draytek vigor_2866lRange<3.9.6

OR

draytek vigor_2866lRange4.0.0–4.2.4

OR

draytek vigor_2866lacRange<3.9.6

OR

draytek vigor_2866lacRange4.0.0–4.2.4

OR

draytek vigor_2865acRange<3.9.6

OR

draytek vigor_2865acRange4.0.0–4.2.4

OR

draytek vigor_2865axRange<3.9.5

OR

draytek vigor_2865axRange4.0.0–4.2.4

OR

draytek vigor_2865vacRange<3.9.6

OR

draytek vigor_2865vacRange4.0.0–4.2.4

OR

draytek vigor_2865lRange<3.9.6

OR

draytek vigor_2865lRange4.0.0–4.2.4

OR

draytek vigor_2865lacRange<3.9.6

OR

draytek vigor_2865lacRange4.0.0–4.2.4

OR

draytek vigor_2862nRange<3.9.6

OR

draytek vigor_2862nRange4.0.0–4.2.4

OR

draytek vigor_2862acRange<3.9.6

OR

draytek vigor_2862acRange4.0.0–4.2.4

OR

draytek vigor_2862vacRange<3.9.6

OR

draytek vigor_2862vacRange4.0.0–4.2.4

OR

draytek vigor_2862bRange<3.9.6

OR

draytek vigor_2862bRange4.0.0–4.2.4

OR

draytek vigor_2862bnRange<3.9.6

OR

draytek vigor_2862bnRange4.0.0–4.2.4

OR

draytek vigor_2862lRange<3.9.6

OR

draytek vigor_2862lRange4.0.0–4.2.4

OR

draytek vigor_2862lacRange<3.9.6

OR

draytek vigor_2862lacRange4.0.0–4.2.4

OR

draytek vigor_2862lnRange<3.9.6

OR

draytek vigor_2862lnRange4.0.0–4.2.4

OR

draytek vigor_2832nRange<3.9.6

OR

draytek vigor_2832nRange4.0.0–4.2.4

OR

draytek vigor_2927axRange<3.9.6

OR

draytek vigor_2927axRange4.0.0–4.2.4

OR

draytek vigor_2927acRange<3.9.6

OR

draytek vigor_2927acRange4.0.0–4.2.4

OR

draytek vigor_2927vacRange<3.9.6

OR

draytek vigor_2927vacRange4.0.0–4.2.4

OR

draytek vigor_2927fRange<3.9.6

OR

draytek vigor_2927fRange4.0.0–4.2.4

OR

draytek vigor_2927lRange<3.9.6

OR

draytek vigor_2927lRange4.0.0–4.2.4

OR

draytek vigor_2927lacRange<3.9.6

OR

draytek vigor_2927lacRange4.0.0–4.2.4

OR

draytek vigor_2926Range<3.9.6

OR

draytek vigor_2926Range4.0.0–4.2.4

OR

draytek vigor_2962Range<3.9.6

OR

draytek vigor_2962Range4.0.0–4.2.4

OR

draytek vigor_1000bRange<3.9.6

OR

draytek vigor_1000bRange4.0.0–4.2.4

OR

draytek vigor_3910Range<3.9.6

OR

draytek vigor_3910Range4.0.0–4.2.4

OR

draytek vigor_165Range<3.9.6

OR

draytek vigor_165Range4.0.0–4.2.4

OR

draytek vigor_166Range<3.9.6

OR

draytek vigor_166Range4.0.0–4.2.4

OR

draytek vigor_130Range<3.9.6

OR

draytek vigor_130Range4.0.0–4.2.4

OR

draytek vigor_167Range<3.9.6

OR

draytek vigor_167Range4.0.0–4.2.4

Source	Link
gist	www.gist.github.com/Ji4n1ng/6d028709d39458f5ab95b3ea211225ef
web	www.web.nvd.nist.gov/view/vuln/detail

23 Dec 2024 00:00Current

7.7High risk

Vulners AI Score7.7

CVSS 39.8

CVSS 210

EPSS0.00599

Draytek Vigor routers Draytek Vigor access points Draytek Vigor switches Draytek Vigor Myvigor cloud Rigidly encrypted credentials Web interface vulnerability