CVE Feed

    Dashboard / CVE / CVE-2023-33778

    CVE-2023-33778

    Draytek Vigor Routers firmware versions below 3.9.6/4.2.4, Access Points firmware versions below v1.4.0, Switches firmware versions below 2.6.7, and Myvigor firmware versions below 2.3.2 were discovered to use hardcoded encryption keys which allows attackers to bind any affected device to their own account. Attackers are then able to create WCF and DrayDDNS licenses and synchronize them from the website.

    Published:Jun 1, 2023
    Last Modified:Jan 9, 2025
    EPS:Jun 1, 2023
    EPSS Score:0.00104
    CVSS Score:9.8

    Affected Products

    Vendor
    Draytek
    Product
    Myvigor
    Vendor
    Draytek
    Product
    Vigor1000b
    Vendor
    Draytek
    Product
    Vigor1000b Firmware
    Vendor
    Draytek
    Product
    Vigor130
    Vendor
    Draytek
    Product
    Vigor130 Firmware
    Vendor
    Draytek
    Product
    Vigor165
    Vendor
    Draytek
    Product
    Vigor165 Firmware
    Vendor
    Draytek
    Product
    Vigor166
    Vendor
    Draytek
    Product
    Vigor166 Firmware
    Vendor
    Draytek
    Product
    Vigor167
    Vendor
    Draytek
    Product
    Vigor167 Firmware
    Vendor
    Draytek
    Product
    Vigor2135ac
    Vendor
    Draytek
    Product
    Vigor2135ac Firmware
    Vendor
    Draytek
    Product
    Vigor2135ax
    Vendor
    Draytek
    Product
    Vigor2135ax Firmware
    Vendor
    Draytek
    Product
    Vigor2135fvac
    Vendor
    Draytek
    Product
    Vigor2135fvac Firmware
    Vendor
    Draytek
    Product
    Vigor2135vac
    Vendor
    Draytek
    Product
    Vigor2135vac Firmware
    Vendor
    Draytek
    Product
    Vigor2620l
    Vendor
    Draytek
    Product
    Vigor2620l Firmware
    Vendor
    Draytek
    Product
    Vigor2620ln
    Vendor
    Draytek
    Product
    Vigor2620ln Firmware
    Vendor
    Draytek
    Product
    Vigor2763ac
    Vendor
    Draytek
    Product
    Vigor2763ac Firmware
    Vendor
    Draytek
    Product
    Vigor2765ac
    Vendor
    Draytek
    Product
    Vigor2765ac Firmware
    Vendor
    Draytek
    Product
    Vigor2765ax
    Vendor
    Draytek
    Product
    Vigor2765ax Firmware
    Vendor
    Draytek
    Product
    Vigor2765vac
    Vendor
    Draytek
    Product
    Vigor2765vac Firmware
    Vendor
    Draytek
    Product
    Vigor2766ac
    Vendor
    Draytek
    Product
    Vigor2766ac Firmware
    Vendor
    Draytek
    Product
    Vigor2766ax
    Vendor
    Draytek
    Product
    Vigor2766ax Firmware
    Vendor
    Draytek
    Product
    Vigor2766vac
    Vendor
    Draytek
    Product
    Vigor2766vac Firmware
    Vendor
    Draytek
    Product
    Vigor2832n
    Vendor
    Draytek
    Product
    Vigor2832n Firmware
    Vendor
    Draytek
    Product
    Vigor2862ac
    Vendor
    Draytek
    Product
    Vigor2862ac Firmware
    Vendor
    Draytek
    Product
    Vigor2862b
    Vendor
    Draytek
    Product
    Vigor2862b Firmware
    Vendor
    Draytek
    Product
    Vigor2862bn
    Vendor
    Draytek
    Product
    Vigor2862bn Firmware
    Vendor
    Draytek
    Product
    Vigor2862l
    Vendor
    Draytek
    Product
    Vigor2862l Firmware
    Vendor
    Draytek
    Product
    Vigor2862lac
    Vendor
    Draytek
    Product
    Vigor2862lac Firmware
    Vendor
    Draytek
    Product
    Vigor2862ln
    Vendor
    Draytek
    Product
    Vigor2862ln Firmware
    Vendor
    Draytek
    Product
    Vigor2862n
    Vendor
    Draytek
    Product
    Vigor2862n Firmware
    Vendor
    Draytek
    Product
    Vigor2862vac
    Vendor
    Draytek
    Product
    Vigor2862vac Firmware
    Vendor
    Draytek
    Product
    Vigor2865ac
    Vendor
    Draytek
    Product
    Vigor2865ac Firmware
    Vendor
    Draytek
    Product
    Vigor2865ax
    Vendor
    Draytek
    Product
    Vigor2865ax Firmware
    Vendor
    Draytek
    Product
    Vigor2865l
    Vendor
    Draytek
    Product
    Vigor2865l Firmware
    Vendor
    Draytek
    Product
    Vigor2865lac
    Vendor
    Draytek
    Product
    Vigor2865lac Firmware
    Vendor
    Draytek
    Product
    Vigor2865vac
    Vendor
    Draytek
    Product
    Vigor2865vac Firmware
    Vendor
    Draytek
    Product
    Vigor2866ac
    Vendor
    Draytek
    Product
    Vigor2866ac Firmware
    Vendor
    Draytek
    Product
    Vigor2866ax
    Vendor
    Draytek
    Product
    Vigor2866ax Firmware
    Vendor
    Draytek
    Product
    Vigor2866l
    Vendor
    Draytek
    Product
    Vigor2866l Firmware
    Vendor
    Draytek
    Product
    Vigor2866lac
    Vendor
    Draytek
    Product
    Vigor2866lac Firmware
    Vendor
    Draytek
    Product
    Vigor2866vac
    Vendor
    Draytek
    Product
    Vigor2866vac Firmware
    Vendor
    Draytek
    Product
    Vigor2915ac
    Vendor
    Draytek
    Product
    Vigor2915ac Firmware
    Vendor
    Draytek
    Product
    Vigor2926 Plus
    Vendor
    Draytek
    Product
    Vigor2926 Plus Firmware
    Vendor
    Draytek
    Product
    Vigor2927ac
    Vendor
    Draytek
    Product
    Vigor2927ac Firmware
    Vendor
    Draytek
    Product
    Vigor2927ax
    Vendor
    Draytek
    Product
    Vigor2927ax Firmware
    Vendor
    Draytek
    Product
    Vigor2927f
    Vendor
    Draytek
    Product
    Vigor2927f Firmware
    Vendor
    Draytek
    Product
    Vigor2927l
    Vendor
    Draytek
    Product
    Vigor2927l Firmware
    Vendor
    Draytek
    Product
    Vigor2927lac
    Vendor
    Draytek
    Product
    Vigor2927lac Firmware
    Vendor
    Draytek
    Product
    Vigor2927vac
    Vendor
    Draytek
    Product
    Vigor2927vac Firmware
    Vendor
    Draytek
    Product
    Vigor2962
    Vendor
    Draytek
    Product
    Vigor2962 Firmware
    Vendor
    Draytek
    Product
    Vigor3910
    Vendor
    Draytek
    Product
    Vigor3910 Firmware
    Vendor
    Draytek
    Product
    Vigorap 1000c
    Vendor
    Draytek
    Product
    Vigorap 1000c Firmware
    Vendor
    Draytek
    Product
    Vigorap 1060c
    Vendor
    Draytek
    Product
    Vigorap 1060c Firmware
    Vendor
    Draytek
    Product
    Vigorap 903
    Vendor
    Draytek
    Product
    Vigorap 903 Firmware
    Vendor
    Draytek
    Product
    Vigorap 906
    Vendor
    Draytek
    Product
    Vigorap 906 Firmware
    Vendor
    Draytek
    Product
    Vigorap 912c
    Vendor
    Draytek
    Product
    Vigorap 912c Firmware
    Vendor
    Draytek
    Product
    Vigorap 918r
    Vendor
    Draytek
    Product
    Vigorap 918r Firmware
    Vendor
    Draytek
    Product
    Vigorap 960c
    Vendor
    Draytek
    Product
    Vigorap 960c Firmware
    Vendor
    Draytek
    Product
    Vigorlte 200n
    Vendor
    Draytek
    Product
    Vigorlte 200n Firmware
    Vendor
    Draytek
    Product
    Vigorswitch Fx2120
    Vendor
    Draytek
    Product
    Vigorswitch Fx2120 Firmware
    Vendor
    Draytek
    Product
    Vigorswitch G1080
    Vendor
    Draytek
    Product
    Vigorswitch G1080 Firmware
    Vendor
    Draytek
    Product
    Vigorswitch G1085
    Vendor
    Draytek
    Product
    Vigorswitch G1085 Firmware
    Vendor
    Draytek
    Product
    Vigorswitch G1282
    Vendor
    Draytek
    Product
    Vigorswitch G1282 Firmware
    Vendor
    Draytek
    Product
    Vigorswitch G2100
    Vendor
    Draytek
    Product
    Vigorswitch G2100 Firmware
    Vendor
    Draytek
    Product
    Vigorswitch G2121
    Vendor
    Draytek
    Product
    Vigorswitch G2121 Firmware
    Vendor
    Draytek
    Product
    Vigorswitch G2280x
    Vendor
    Draytek
    Product
    Vigorswitch G2280x Firmware
    Vendor
    Draytek
    Product
    Vigorswitch G2540xs
    Vendor
    Draytek
    Product
    Vigorswitch G2540xs Firmware
    Vendor
    Draytek
    Product
    Vigorswitch P1282
    Vendor
    Draytek
    Product
    Vigorswitch P1282 Firmware
    Vendor
    Draytek
    Product
    Vigorswitch P2100
    Vendor
    Draytek
    Product
    Vigorswitch P2100 Firmware
    Vendor
    Draytek
    Product
    Vigorswitch P2280x
    Vendor
    Draytek
    Product
    Vigorswitch P2280x Firmware
    Vendor
    Draytek
    Product
    Vigorswitch P2540xs
    Vendor
    Draytek
    Product
    Vigorswitch P2540xs Firmware
    Vendor
    Draytek
    Product
    Vigorswitch Pq2121x
    Vendor
    Draytek
    Product
    Vigorswitch Pq2121x Firmware
    Vendor
    Draytek
    Product
    Vigorswitch Pq2200xb
    Vendor
    Draytek
    Product
    Vigorswitch Pq2200xb Firmware
    Vendor
    Draytek
    Product
    Vigorswitch Q2121x
    Vendor
    Draytek
    Product
    Vigorswitch Q2121x Firmware
    Vendor
    Draytek
    Product
    Vigorswitch Q2200x
    Vendor
    Draytek
    Product
    Vigorswitch Q2200x Firmware

    Exploits

    https://gist.github.com/Ji4n1ng/6d028709d39458f5ab95b3ea211225efhttps://gist.github.com/Ji4n1ng/6d028709d39458f5ab95b3ea211225ef

    Common Weakness Enumeration

    CWE-798 Use of Hard-coded Credentials

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High