logo
Vulnerability feed
CONTRIBUTE

Vulnerability

warn

CVE-2023-33778

Reference to the description:

https://nvd.nist.gov/vuln/detail/CVE-2023-33778

Description:
Draytek Vigor Routers firmware versions below 3.9.6/4.2.4, Access Points firmware versions below v1.4.0, Switches firmware versions below 2.6.7, and Myvigor firmware versions below 2.3.2 were discovered to use hardcoded encryption keys which allows attackers to bind any affected device to their own account. Attackers are then able to create WCF and DrayDDNS licenses and synchronize them from the website.
Last updated date:
06/09/2023
Type:
exploit
Confidence:
HIGH
Date of publishing:
06/09/2023
Reference url to background

https://gist.github.com/Ji4n1ng/6d028709d39458f5ab95b3ea211225ef

Vulnerability FeedContributorsAboutBlog

@inTheWild

©2024

Privacy Policy