CVE-2023-33778

Summary

CVE-2023-33778 is a vulnerability affecting Draytek Vigor Routers, Access Points, Switches, and Myvigor firmware. Versions below 3.9.6/4.2.4, v1.4.0, 2.6.7, and 2.3.2, respectively, were identified as using hardcoded encryption keys. An attacker can exploit this weakness by binding the affected device to their account, enabling them to create WCF and DrayDDNS licenses and synchronize them from the website. The implications of this issue include potential unauthorized access and license misappropriation. Users are strongly advised to update their devices to the latest firmware versions to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.