Connect with us
ANE Scholarship
Categories:
X

Technology

A serious flaw in DrayTek routers exposes thousands of SMEs to risk of abuse.

Published

on

A serious flaw in DrayTek routers exposes thousands of SMEs to risk of abuse.
Share this post:

Now-patched RCE bug impacts dozens of DrayTek Vigor router models.

A critical security vulnerability impacting DrayTek Vigor routers could allow unauthenticated attackers to gain full access to victim networks.

The flaw affects the Taiwanese hardware manufacturer’s popular Vigor 3910 router, along with nearly 30 other models that share the same codebase.

200,000 exposed devices

The DrayTek router vulnerability was discovered by researchers from Trellix, who found that by triggering a buffer overflow in the web management interface, they could take over the underlying DrayOS.

Tracked as CVE-2022-32548, the vulnerability earned a maximum CVSS score of 10, as this attack requires no authentication to achieve remote code execution (RCE).

“During our research we uncovered over 200,000 devices which have the vulnerable service currently exposed on the internet and would require no user interaction to be exploited,” Trellix security researcher Philippe Laulheret writes in a technical blog post.

‘Complete compromise’

Exploiting this vulnerability can lead to a complete compromise of the device and can enable a malicious actor to access internal resources of the breached networks.

Failed exploitation attempts can lead to device reboot, denial of service, and other abnormal behavior.

A security advisory released yesterday (August 4) includes the full list of impacted router models.

“Our standard best practice recommendation is to always keep firmware up to date, but we recommend that you check that affected units are running at least the firmware version [listed],” the vendor said.

Patch window

As outlined in an accompanying CERT NZ advisory this week, there has been no evidence to indicate that this vulnerability has been exploited in the wild.

“However, we strongly recommend you investigate and patch any DrayTek devices on your network as soon as possible to prevent them from being compromised,” the advisory reads.

Greg Fitzgerald, co-founder of Sevco Security, said: “Identifying and patching the known routers is a must, but organizations will still be vulnerable if there are abandoned devices connected to the network that are affected.”

Daily Swig has asked the researchers if they have seen a reduction in the number of exposed devices since the fixes were pushed out. This article will be updated when fresh information comes to hand.

The Trellix team will release more details about how the vulnerability was discovered and exploited in an upcoming presentation at Hexacon in France on October 14-15.


Get More Stories Like This On: Facebook: @AllNaijaEntertainment, Twitter: @AllNaijaEntertainment

News1 hour ago

Troops strike the Boko Haram commander and 27 others in Borno

Director of "Blood Sisters" Biyi Bandele passes away at 54
Entertainment1 hour ago

Director of “Blood Sisters” Biyi Bandele passes away at 54

Entertainment1 hour ago

Davido posts a screenshot of himself and Chioma on a video conversation with the caption, “My gist partner.”

Dame Olivia Newton-John, a star of Grease, passes away at age 73
Entertainment2 hours ago

Dame Olivia Newton-John, a star of Grease, passes away at age 73

The Comanche warrior paint's significance is explained by Prey star Amber Midthunder
Entertainment2 hours ago

The Comanche warrior paint’s significance is explained by Prey star Amber Midthunder

Hold Me Closer, a collaboration song between Britney Spears and Sir Elton John, making the singer's first single to be released since 2016
Entertainment2 hours ago

Hold Me Closer, a collaboration song between Britney Spears and Sir Elton John, making the singer’s first single to be released since 2016

Your daily horoscope for Monday, July 25, 2022
Horoscope2 hours ago

Your daily horoscope for Tuesday, August 9, 2022

BBNaija S7: Phyna, Bryann, Groovy, Ilebaye, and Khalid are up for eviction
Entertainment11 hours ago

BBNaija S7: Phyna, Bryann, Groovy, Ilebaye, and Khalid are up for eviction

Entertainment11 hours ago

“I’m sorry for all the embarrassment I’ve caused my wife, my kids, my mother and all our families,” – Two Face Idibia

How and when to view the best meteor shower of the year, the Perseids meteor shower, in 2022
Technology12 hours ago

How and when to view the best meteor shower of the year, the Perseids meteor shower, in 2022

Technology12 hours ago

Apple allegedly instructs suppliers to avoid labeling shipments to China with “Made in Taiwan”

Sports12 hours ago

Super Eagles hero celebrates Premier League accomplishment as “Dream Turns Reality”

Frenkie de Jong makes Chelsea transfer decision in phone call with Todd Boehly
Sports12 hours ago

Frenkie de Jong makes Chelsea transfer decision in phone call with Todd Boehly

News14 hours ago

Police re-arrest 25 other suspects and the escapee from Jos prison

News14 hours ago

Lagos policeman shoot and murder an ex-convict while battling with armed criminals

News14 hours ago

Cleaner received an eight-month sentence for stealing a laptop bag

Dariye and Nyame recover their freedom, 4 months after Buhari's pardon
News14 hours ago

Dariye and Nyame recover their freedom, 4 months after Buhari’s pardon

Education14 hours ago

BREAKING: WAEC announces the 2022 WASSCE results

"Buga" is a victory song for Nigerian medalists
Entertainment20 hours ago

“Buga” is a victory song for Nigerian medalists

Kizz Daniel dazzles in a sold-out performance in Uganda
Entertainment20 hours ago

Kizz Daniel dazzles in a sold-out performance in Uganda

After four years of marriage, Gideon Okeke's wife is getting a divorce
Entertainment20 hours ago

After four years of marriage, Gideon Okeke’s wife is getting a divorce

Beauty's brother burns critics over disqualification: "Calm down, her script was wonderful."
Entertainment20 hours ago

BBNaija S7: Beauty’s brother burns critics over disqualification: “Calm down, her script was wonderful.”

Your daily horoscope for Monday, July 25, 2022
Horoscope1 day ago

Your daily horoscope for Monday, August 8, 2022

BBNaija
Entertainment1 day ago

#BBNaija: Christy O, Cyph evicted

Lewandoski Pedri Gavi Barcelona vs Pumas Joan Gamper Trophy
Sports1 day ago

Deadly Barcelona Thrashed PUMAS to win trophy, Lewandoski gets debut goal

Erling Haaland Manchester City
Sports2 days ago

Reactions to Manchester City’s opening-game 2-0 victory over West Ham: “Erling Haaland is scary.”

Beauty BBNaija
Entertainment2 days ago

BBNaija S7: Beauty eliminated from reality TV show

Erik Ten Hag Manchester United vs Brighton
Sports2 days ago

Erik Ten Hag Chops First Breakfast as Man Utd Manager as Brighton Wins 2-1

Ronaldo
Sports2 days ago

Man Utd must let Ronaldo leave – Wayne Rooney

Scholarship Graduate
Education2 days ago

Australia Scholarship: Apply for Griffith University degree scholarship, 2022

Godwin Obaseki
Education2 days ago

Edo Govt To Recruit 1000 New Teachers, Train 650 Others

Airport
News2 days ago

Ebonyi Govt Laments Destruction Of Airport Fence

Isco
Sports2 days ago

Transfer: Real Madrid star, Isco to Sevilla as free agent

Neto
Sports2 days ago

Transfer: Neto joins Bournemouth from Barcelona

Kano loses one pilgrim in Saudi Arabia
News2 days ago

Kano loses one pilgrim in Saudi Arabia

Tobi Amusan wins a gold medal at the Commonwealth Games and breaks a record
Sports2 days ago

Tobi Amusan wins a gold medal at the Commonwealth Games and breaks a record

News2 days ago

Deposed Emir Sanusi: “I’ll keep speaking out to rebuild Nigeria.”

Religious organizations disagree on how to pay for the Jos Main Market project
News2 days ago

Religious organizations disagree on how to pay for the Jos Main Market project

Jenkins security: The most recent plugin advisory contains flaws with unpatched XSS and CSRF
Technology2 days ago

Jenkins security: The most recent plugin advisory contains flaws with unpatched XSS and CSRF

ParseThru: Multiple Go apps have been found to have an HTTP parameter smuggling issue
Technology2 days ago

ParseThru: Multiple Go apps have been found to have an HTTP parameter smuggling issue

THE WITCH'S DAUGHTER story _ AllNaijaEntertainment
ANE Stories6 days ago

[STORY] THE WITCH’S DAUGHTER (Complete Episodes)

Money Over Love story _ AllNaijaEntertainment
ANE Stories6 days ago

[STORY] MONEY OVER LOVE (Complete Episodes)

WHAT MY ELDER BROTHER'S WIFE TAUGHT ME by Temi Akintade _ AllNaijaEntertainment
ANE Stories6 days ago

[STORY] WHAT MY ELDER BROTHER’S WIFE TAUGHT ME (Complete Episodes)

SADE'S HEART TALE
ANE Stories6 days ago

[STORY] SADE’S HEART TALE (Episode 19)

THE WITCH'S DAUGHTER story _ AllNaijaEntertainment
ANE Stories6 days ago

[STORY] THE WITCH’S DAUGHTER (Episode 07)

Money Over Love story _ AllNaijaEntertainment
ANE Stories6 days ago

[STORY] MONEY OVER LOVE (Episode 01)

WHAT MY ELDER BROTHER'S WIFE TAUGHT ME by Temi Akintade _ AllNaijaEntertainment
ANE Stories6 days ago

[STORY] WHAT MY ELDER BROTHER’S WIFE TAUGHT ME (Episode 01)

THE WITCH'S DAUGHTER story _ AllNaijaEntertainment
ANE Stories6 days ago

[STORY] THE WITCH’S DAUGHTER (Episode 01)

THE WITCH'S DAUGHTER story _ AllNaijaEntertainment
ANE Stories6 days ago

[STORY] THE WITCH’S DAUGHTER (Episode 03)

Money Over Love story _ AllNaijaEntertainment
ANE Stories6 days ago

[STORY] MONEY OVER LOVE (Episode 09)

WHAT MY ELDER BROTHER'S WIFE TAUGHT ME by Temi Akintade _ AllNaijaEntertainment
ANE Stories6 days ago

[STORY] WHAT MY ELDER BROTHER’S WIFE TAUGHT ME (Final Episode 04)

THE WITCH'S DAUGHTER story _ AllNaijaEntertainment
ANE Stories6 days ago

[STORY] THE WITCH’S DAUGHTER (Episode 05)

THE WITCH'S DAUGHTER story _ AllNaijaEntertainment
ANE Stories6 days ago

[STORY] THE WITCH’S DAUGHTER (Episode 04)

WHAT MY ELDER BROTHER'S WIFE TAUGHT ME by Temi Akintade _ AllNaijaEntertainment
ANE Stories6 days ago

[STORY] WHAT MY ELDER BROTHER’S WIFE TAUGHT ME (Episode 02)

WHAT MY ELDER BROTHER'S WIFE TAUGHT ME by Temi Akintade _ AllNaijaEntertainment
ANE Stories6 days ago

[STORY] WHAT MY ELDER BROTHER’S WIFE TAUGHT ME (Episode 03)

THE WITCH'S DAUGHTER story _ AllNaijaEntertainment
ANE Stories6 days ago

[STORY] THE WITCH’S DAUGHTER (Episode 06)

Daniel Bachmann has won the race to start over Super Eagles goalkeeper Maduka Okoye for Watford this season
Sports5 days ago

Revealed: Why Watford goalkeeper Maduka Okoye was not included in the team on Monday

Money Over Love story _ AllNaijaEntertainment
ANE Stories6 days ago

[STORY] MONEY OVER LOVE (Episode 04)

THE WITCH'S DAUGHTER story _ AllNaijaEntertainment
ANE Stories6 days ago

[STORY] THE WITCH’S DAUGHTER (Episode 02)

Money Over Love story _ AllNaijaEntertainment
ANE Stories6 days ago

[STORY] MONEY OVER LOVE (Episode 05)

Money Over Love story _ AllNaijaEntertainment
ANE Stories6 days ago

[STORY] MONEY OVER LOVE (Episode 03)

Money Over Love story _ AllNaijaEntertainment
ANE Stories6 days ago

[STORY] MONEY OVER LOVE (Episode 12)

THE WITCH'S DAUGHTER story _ AllNaijaEntertainment
ANE Stories5 days ago

[STORY] THE WITCH’S DAUGHTER (Final Episode 09)

Money Over Love story _ AllNaijaEntertainment
ANE Stories6 days ago

[STORY] MONEY OVER LOVE (Episode 02)

Money Over Love story _ AllNaijaEntertainment
ANE Stories6 days ago

[STORY] MONEY OVER LOVE (Episode 06)

Money Over Love story _ AllNaijaEntertainment
ANE Stories6 days ago

[STORY] MONEY OVER LOVE (Episode 08)

BBNaija S7: Amaka and Phyna bemoan the lack of condoms in the home
Entertainment6 days ago

BBNaija S7: Amaka and Phyna bemoan the lack of condoms in the home

Epic movie "Anikulapo" by Kunle Afolayan is scheduled to premiere in September
Entertainment6 days ago

Epic movie “Anikulapo” by Kunle Afolayan is scheduled to premiere in September

Money Over Love story _ AllNaijaEntertainment
ANE Stories6 days ago

[STORY] MONEY OVER LOVE (Episode 14)

Money Over Love story _ AllNaijaEntertainment
ANE Stories6 days ago

[STORY] MONEY OVER LOVE (Episode 11)

Nkem Owoh
Entertainment5 days ago

Nkem Owoh Breaks Silence On Claims He Rejected N10 Million To Endorse Bola Tinubu For President

Nancy Isime
Entertainment6 days ago

“Nancy Isime Did Butt Enlargement Surgery” – Blessing Okoro Makes Shocking Revelation

THE WITCH'S DAUGHTER story _ AllNaijaEntertainment
ANE Stories5 days ago

[STORY] THE WITCH’S DAUGHTER (Episode 08)

Use your knowledge wisely
Horoscope7 days ago

Taurus: Personality qualities, star sign compatibility and Horoscope dates

Monalisa Chida claims the abductor's phone may be used to find kidnapped Nollywood actors.
Celebrity7 days ago

Monalisa Chida claims the abductor’s phone may be used to find kidnapped Nollywood actors.

Money Over Love story _ AllNaijaEntertainment
ANE Stories6 days ago

[STORY] MONEY OVER LOVE (Episode 17)

Money Over Love story _ AllNaijaEntertainment
ANE Stories6 days ago

[STORY] MONEY OVER LOVE (Episode 18)

Money Over Love story _ AllNaijaEntertainment
ANE Stories6 days ago

[STORY] MONEY OVER LOVE (Final Episode 20)

Money Over Love story _ AllNaijaEntertainment
ANE Stories6 days ago

[STORY] MONEY OVER LOVE (Episode 10)

Sports7 days ago

The representatives of Victor Osimhen call a CRUNCH meeting to debate the future of Napoli.

ANE's Billboard Hots



Join "ANE sabi" clique

Don't miss a thing, get ogbonge ANE latest updates to fuel your conversation daily.