CVE-2023-33778
Summary
| CVE | CVE-2023-33778 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-06-01 04:15:00 UTC |
| Updated | 2023-06-09 18:26:00 UTC |
| Description | Draytek Vigor Routers firmware versions below 3.9.6/4.2.4, Access Points firmware versions below v1.4.0, Switches firmware versions below 2.6.7, and Myvigor firmware versions below 2.3.2 were discovered to use hardcoded encryption keys which allows attackers to bind any affected device to their own account. Attackers are then able to create WCF and DrayDDNS licenses and synchronize them from the website. |
Risk And Classification
Problem Types: CWE-798
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Draytek | Myvigor | All | All | All | All |
| Hardware | Draytek | Vigor1000b | - | All | All | All |
| Operating System | Draytek | Vigor1000b Firmware | All | All | All | All |
| Hardware | Draytek | Vigor130 | - | All | All | All |
| Operating System | Draytek | Vigor130 Firmware | All | All | All | All |
| Hardware | Draytek | Vigor165 | - | All | All | All |
| Operating System | Draytek | Vigor165 Firmware | All | All | All | All |
| Hardware | Draytek | Vigor166 | - | All | All | All |
| Operating System | Draytek | Vigor166 Firmware | All | All | All | All |
| Hardware | Draytek | Vigor167 | - | All | All | All |
| Operating System | Draytek | Vigor167 Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2135ac | - | All | All | All |
| Operating System | Draytek | Vigor2135ac Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2135ax | - | All | All | All |
| Operating System | Draytek | Vigor2135ax Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2135fvac | - | All | All | All |
| Operating System | Draytek | Vigor2135fvac Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2135vac | - | All | All | All |
| Operating System | Draytek | Vigor2135vac Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2620l | - | All | All | All |
| Hardware | Draytek | Vigor2620ln | - | All | All | All |
| Operating System | Draytek | Vigor2620ln Firmware | All | All | All | All |
| Operating System | Draytek | Vigor2620l Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2763ac | - | All | All | All |
| Operating System | Draytek | Vigor2763ac Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2765ac | - | All | All | All |
| Operating System | Draytek | Vigor2765ac Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2765ax | - | All | All | All |
| Operating System | Draytek | Vigor2765ax Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2765vac | - | All | All | All |
| Operating System | Draytek | Vigor2765vac Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2766ac | - | All | All | All |
| Operating System | Draytek | Vigor2766ac Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2766ax | - | All | All | All |
| Operating System | Draytek | Vigor2766ax Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2766vac | - | All | All | All |
| Operating System | Draytek | Vigor2766vac Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2832n | - | All | All | All |
| Operating System | Draytek | Vigor2832n Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2862ac | - | All | All | All |
| Operating System | Draytek | Vigor2862ac Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2862b | - | All | All | All |
| Hardware | Draytek | Vigor2862bn | - | All | All | All |
| Operating System | Draytek | Vigor2862bn Firmware | All | All | All | All |
| Operating System | Draytek | Vigor2862b Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2862l | - | All | All | All |
| Hardware | Draytek | Vigor2862lac | - | All | All | All |
| Operating System | Draytek | Vigor2862lac Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2862ln | - | All | All | All |
| Operating System | Draytek | Vigor2862ln Firmware | All | All | All | All |
| Operating System | Draytek | Vigor2862l Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2862n | - | All | All | All |
| Operating System | Draytek | Vigor2862n Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2862vac | - | All | All | All |
| Operating System | Draytek | Vigor2862vac Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2865ac | - | All | All | All |
| Operating System | Draytek | Vigor2865ac Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2865ax | - | All | All | All |
| Operating System | Draytek | Vigor2865ax Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2865l | - | All | All | All |
| Hardware | Draytek | Vigor2865lac | - | All | All | All |
| Operating System | Draytek | Vigor2865lac Firmware | All | All | All | All |
| Operating System | Draytek | Vigor2865l Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2865vac | - | All | All | All |
| Operating System | Draytek | Vigor2865vac Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2866ac | - | All | All | All |
| Operating System | Draytek | Vigor2866ac Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2866ax | - | All | All | All |
| Operating System | Draytek | Vigor2866ax Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2866l | - | All | All | All |
| Hardware | Draytek | Vigor2866lac | - | All | All | All |
| Operating System | Draytek | Vigor2866lac Firmware | All | All | All | All |
| Operating System | Draytek | Vigor2866l Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2866vac | - | All | All | All |
| Operating System | Draytek | Vigor2866vac Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2915ac | - | All | All | All |
| Operating System | Draytek | Vigor2915ac Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2926 Plus | - | All | All | All |
| Operating System | Draytek | Vigor2926 Plus Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2927ac | - | All | All | All |
| Operating System | Draytek | Vigor2927ac Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2927ax | - | All | All | All |
| Operating System | Draytek | Vigor2927ax Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2927f | - | All | All | All |
| Operating System | Draytek | Vigor2927f Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2927l | - | All | All | All |
| Hardware | Draytek | Vigor2927lac | - | All | All | All |
| Operating System | Draytek | Vigor2927lac Firmware | All | All | All | All |
| Operating System | Draytek | Vigor2927l Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2927vac | - | All | All | All |
| Operating System | Draytek | Vigor2927vac Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2962 | - | All | All | All |
| Operating System | Draytek | Vigor2962 Firmware | All | All | All | All |
| Hardware | Draytek | Vigor3910 | - | All | All | All |
| Operating System | Draytek | Vigor3910 Firmware | All | All | All | All |
| Hardware | Draytek | Vigorap 1000c | - | All | All | All |
| Operating System | Draytek | Vigorap 1000c Firmware | All | All | All | All |
| Hardware | Draytek | Vigorap 1060c | - | All | All | All |
| Operating System | Draytek | Vigorap 1060c Firmware | All | All | All | All |
| Hardware | Draytek | Vigorap 903 | - | All | All | All |
| Operating System | Draytek | Vigorap 903 Firmware | All | All | All | All |
| Hardware | Draytek | Vigorap 906 | - | All | All | All |
| Operating System | Draytek | Vigorap 906 Firmware | All | All | All | All |
| Hardware | Draytek | Vigorap 912c | - | All | All | All |
| Operating System | Draytek | Vigorap 912c Firmware | All | All | All | All |
| Hardware | Draytek | Vigorap 918r | - | All | All | All |
| Operating System | Draytek | Vigorap 918r Firmware | All | All | All | All |
| Hardware | Draytek | Vigorap 960c | - | All | All | All |
| Operating System | Draytek | Vigorap 960c Firmware | All | All | All | All |
| Hardware | Draytek | Vigorlte 200n | - | All | All | All |
| Operating System | Draytek | Vigorlte 200n Firmware | All | All | All | All |
| Hardware | Draytek | Vigorswitch Fx2120 | - | All | All | All |
| Operating System | Draytek | Vigorswitch Fx2120 Firmware | All | All | All | All |
| Hardware | Draytek | Vigorswitch G1080 | - | All | All | All |
| Operating System | Draytek | Vigorswitch G1080 Firmware | All | All | All | All |
| Hardware | Draytek | Vigorswitch G1085 | - | All | All | All |
| Operating System | Draytek | Vigorswitch G1085 Firmware | All | All | All | All |
| Hardware | Draytek | Vigorswitch G1282 | - | All | All | All |
| Operating System | Draytek | Vigorswitch G1282 Firmware | All | All | All | All |
| Hardware | Draytek | Vigorswitch G2100 | - | All | All | All |
| Operating System | Draytek | Vigorswitch G2100 Firmware | All | All | All | All |
| Hardware | Draytek | Vigorswitch G2121 | - | All | All | All |
| Operating System | Draytek | Vigorswitch G2121 Firmware | All | All | All | All |
| Hardware | Draytek | Vigorswitch G2280x | - | All | All | All |
| Operating System | Draytek | Vigorswitch G2280x Firmware | All | All | All | All |
| Hardware | Draytek | Vigorswitch G2540xs | - | All | All | All |
| Operating System | Draytek | Vigorswitch G2540xs Firmware | All | All | All | All |
| Hardware | Draytek | Vigorswitch P1282 | - | All | All | All |
| Operating System | Draytek | Vigorswitch P1282 Firmware | All | All | All | All |
| Hardware | Draytek | Vigorswitch P2100 | - | All | All | All |
| Operating System | Draytek | Vigorswitch P2100 Firmware | All | All | All | All |
| Hardware | Draytek | Vigorswitch P2280x | - | All | All | All |
| Operating System | Draytek | Vigorswitch P2280x Firmware | All | All | All | All |
| Hardware | Draytek | Vigorswitch P2540xs | - | All | All | All |
| Operating System | Draytek | Vigorswitch P2540xs Firmware | All | All | All | All |
| Hardware | Draytek | Vigorswitch Pq2121x | - | All | All | All |
| Operating System | Draytek | Vigorswitch Pq2121x Firmware | All | All | All | All |
| Hardware | Draytek | Vigorswitch Pq2200xb | - | All | All | All |
| Operating System | Draytek | Vigorswitch Pq2200xb Firmware | All | All | All | All |
| Hardware | Draytek | Vigorswitch Q2121x | - | All | All | All |
| Operating System | Draytek | Vigorswitch Q2121x Firmware | All | All | All | All |
| Hardware | Draytek | Vigorswitch Q2200x | - | All | All | All |
| Operating System | Draytek | Vigorswitch Q2200x Firmware | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| DrayTek-vigor-vul-description · GitHub | MISC | gist.github.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.