#draytek — Public Fediverse posts

CVE Alert: CVE-2022-50994 - DrayTek - Vigor 2960 - https://www.redpacketsecurity.com/cve-alert-cve-2022-50994-draytek-vigor-2960/

#OSINT #ThreatIntel #CyberSecurity #cve-2022-50994 #draytek #vigor-2960

CVE Alert: CVE-2022-50994 - DrayTek - Vigor 2960 - https://www.redpacketsecurity.com/cve-alert-cve-2022-50994-draytek-vigor-2960/

#OSINT #ThreatIntel #CyberSecurity #cve-2022-50994 #draytek #vigor-2960

CVE Alert: CVE-2022-50994 - DrayTek - Vigor 2960 - https://www.redpacketsecurity.com/cve-alert-cve-2022-50994-draytek-vigor-2960/

#OSINT #ThreatIntel #CyberSecurity #cve-2022-50994 #draytek #vigor-2960

CVE Alert: CVE-2022-50994 - DrayTek - Vigor 2960 - https://www.redpacketsecurity.com/cve-alert-cve-2022-50994-draytek-vigor-2960/

#OSINT #ThreatIntel #CyberSecurity #cve-2022-50994 #draytek #vigor-2960

CVE Alert: CVE-2022-50994 - DrayTek - Vigor 2960 - https://www.redpacketsecurity.com/cve-alert-cve-2022-50994-draytek-vigor-2960/

#OSINT #ThreatIntel #CyberSecurity #cve-2022-50994 #draytek #vigor-2960

Is there a way to remove the default admin account on a #DrayTek switch from the web interface? As best as I can tell you can only make it 'view only'.

And whoever thought the management rules list shouldn't differentiate enabled/disabled.......

And you cannot aggregate "normal" ports with "fiber" ports

Unauthenticated RCE Flaw Patched in DrayTek Routers https://www.securityweek.com/unauthenticated-rce-flaw-patched-in-draytek-routers/ #Vulnerabilities #DrayTek #router

Unauthenticated RCE Flaw Patched in DrayTek Routers https://www.securityweek.com/unauthenticated-rce-flaw-patched-in-draytek-routers/ #Vulnerabilities #DrayTek #router

New blog post: https://blog.mei-home.net/posts/snmp-exporter/

A short one this time, about my setup for getting some SNMP data provided by my DrayTek VDSL modem into Prometheus.

#HomeLab #Blog #Prometheus #DrayTek

Warnung vor Angriffen auf neue #SAP-#Netweaver-Lücke, #Chrome und #Draytek-Router | Security https://www.heise.de/news/Warnung-vor-Angriffen-auf-neue-SAP-Netweaver-Luecke-Chrome-und-Draytek-Router-10385563.html #Patchday #SAPNetweaver #Vigor2960 #Vigor300B #DraytekVigor2960 #DraytekVigor300B #Google :google: #GoogleChrome #ChromeBrowser

Warnung vor Angriffen auf neue #SAP-#Netweaver-Lücke, #Chrome und #Draytek-Router | Security https://www.heise.de/news/Warnung-vor-Angriffen-auf-neue-SAP-Netweaver-Luecke-Chrome-und-Draytek-Router-10385563.html #Patchday #SAPNetweaver #Vigor2960 #Vigor300B #DraytekVigor2960 #DraytekVigor300B #Google :google: #GoogleChrome #ChromeBrowser

Warnung vor Angriffen auf neue #SAP-#Netweaver-Lücke, #Chrome und #Draytek-Router | Security https://www.heise.de/news/Warnung-vor-Angriffen-auf-neue-SAP-Netweaver-Luecke-Chrome-und-Draytek-Router-10385563.html #Patchday #SAPNetweaver #Vigor2960 #Vigor300B #DraytekVigor2960 #DraytekVigor300B #Google :google: #GoogleChrome #ChromeBrowser

Jemand hier Ahnung von Mesh-Wifi mit #Draytek Geräten? Konkret ein 2865Lac und 2x AP903 (wired uplink).

Mein Mesh funzt, aber die APs nehmen partout die Configsync vom Router nicht an (außer SSID1).

Jemand eine Idee warum?

Questions Remain Over Attacks Causing DrayTek Router Reboots https://www.securityweek.com/questions-remain-over-attacks-causing-draytek-router-reboots/ #NetworkSecurity #exploited #DrayTek #router

Questions Remain Over Attacks Causing DrayTek Router Reboots https://www.securityweek.com/questions-remain-over-attacks-causing-draytek-router-reboots/ #NetworkSecurity #exploited #DrayTek #router

Vulnerability Exploitation Possibly Behind Widespread DrayTek Router Reboots – Source: www.securityweek.com https://ciso2ciso.com/vulnerability-exploitation-possibly-behind-widespread-draytek-router-reboots-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #NetworkSecurity #securityweekcom #securityweek #Exploited #DrayTek #router

Hm, why are so many DrayTek routers stuck in a bootloop? – Source: go.theregister.com https://ciso2ciso.com/hm-why-are-so-many-draytek-routers-stuck-in-a-bootloop-source-go-theregister-com/ #rssfeedpostgeneratorecho #TheRegisterSecurity #CyberSecurityNews #TheRegister #DrayTek

🚨 Following reports of widespread DrayTek router reboots, GreyNoise is bringing awareness to in-the-wild activity against multiple known vulnerabilities in DrayTek devices. Read the analysis ⬇️

https://www.greynoise.io/blog/in-the-wild-activity-against-draytek-routers

#GreyNoise #ThreatIntel #Cybersecurity #DrayTek

Vulnerability Exploitation Possibly Behind Widespread DrayTek Router Reboots https://www.securityweek.com/vulnerability-exploitation-possibly-behind-widespread-draytek-router-reboots/ #NetworkSecurity #exploited #DrayTek #router

Vulnerability Exploitation Possibly Behind Widespread DrayTek Router Reboots https://www.securityweek.com/vulnerability-exploitation-possibly-behind-widespread-draytek-router-reboots/ #NetworkSecurity #exploited #DrayTek #router

DrayTek router chaos! 🌐 Wereldwijd internetproblemen. Netwerkbeheerders, controleer je systemen en update je firmware! #TechNews #DrayTek 
https://itinsights.nl/analyses/draytek-router-apocalyps-internet-ploft-volledig-uit/

#Draytek a publié en scred une documentation mais n'a pas vraiment communiqué sur le problème...

La mise en place d'ACL a l'air de fonctionner. Parce que désactiver les VPN c'est gentil mais ce n'est pas possible partout :/.

Et pour remplacer les routeurs, il faut que les clients acceptent les devis.

https://faq.draytek.com.au/docs/draytek-routers-rebooting-how-to-solve-this-issue/

#vismaviedetech #vismaviededirtech

#Draytek a publié en scred une documentation mais n'a pas vraiment communiqué sur le problème...

La mise en place d'ACL a l'air de fonctionner. Parce que désactiver les VPN c'est gentil mais ce n'est pas possible partout :/.

Et pour remplacer les routeurs, il faut que les clients acceptent les devis.

https://faq.draytek.com.au/docs/draytek-routers-rebooting-how-to-solve-this-issue/

#vismaviedetech #vismaviededirtech

Hey folks, ready for your daily dose of cyber intel? ☕️

Tuesday's update is out and it's packed with need-to-know updates:

🚨 Critical Next.js Flaw: Authorization bypass vulnerability (CVE-2025-29927) impacting versions before 15.2.3. Upgrade ASAP or block those 'x-middleware-subrequest' headers!

🐜 Weaver Ant's Long Game: Chinese hackers spied on a telco network for four years using compromised Zyxel routers and custom web shells. Talk about persistence!

🐍 VanHelsing RaaS Emerges: A new ransomware player targeting Windows, ARM, ESXi systems. Keep an eye on this one!

☁️ Oracle Cloud Breach Claims: Did they or didn't they? Oracle denies a breach, but a threat actor is claiming otherwise.

🚂 Ukrainian Railway Hit: Cyberattack disrupts online ticket sales amidst crucial transport operations. Resilience is key.

🔄 DrayTek Router Chaos: ISPs are scrambling as DrayTek routers enter reboot loops. Potential vulnerability or buggy update at play.

🤖 AI-Enhanced Cybercrime: Europol warns that organized crime is leveling up with AI, partnering with state-aligned entities.

🛰️ Starlink Intercepted: Thai authorities seize Starlink transmitters headed for Myanmar scam centers. Criminals are finding ways around cut-offs.

🚓 Cybercrime Crackdown: 300+ suspects arrested in Africa for cyber scams. A win for international law enforcement!

🧬 23andMe's Bankruptcy Woes: Privacy advocates raise concerns about DNA data as 23andMe files for bankruptcy. What happens to all that genetic info?

🔒 Pennsylvania County Ransomware: Sensitive data stolen during a ransomware attack. Another reminder to shore up those defenses.

👁️‍🗨️ China Bans Facial Recognition: Consent is now required for facial recognition in China. But are there exceptions for government and AI training?

👉 Dive into the full details here: https://opalsec.io/daily-news-update-tuesday-march-25-2025-australia-melbourne/

Stay vigilant, stay informed, and let's keep the digital world a little safer, one update at a time. 🛡️

#Cyber #CyberSec #Cybersecurity #InfoSec #ThreatIntelligence #ThreatIntel #Ransomware #NextJS #China #AI #Cybercrime #DataBreach #Privacy #Starlink #Europol #Vulnerability #WeaverAnt #VanHelsing #OracleCloud #Ukraine #DrayTek #23andMe #CyberAttack #infosecurity #Privacy #DataPrivacy #AI #InfoSecNews #News

Une attaque sur les routeurs Draytek pas à jour, qu'est-ce qu'on rigole aujourd'hui.

https://www.ispreview.co.uk/index.php/2025/03/broadband-isps-report-uk-connectivity-problems-with-vulnerable-draytek-routers.html

#vismaviededirtech #vismaviedetech #draytek

DrayTek routers in the UK (and to a lesser extent elsewhere) are having A Bad Weekend. Lots of "spontaneous" reboots.

Also, DrayTek's UK website is unreachable. So this looks like a concerted attack.

Details are patchy, but ISP Review is tracking the problem: https://www.ispreview.co.uk/index.php/2025/03/broadband-isps-report-uk-connectivity-problems-with-vulnerable-draytek-routers.html

Applying firmware upgrades and disabling VPN services will help. Search your networks for indicators of compromise.

#DrayTek #Outage #DDoS #CVE

𝗝𝘂𝘀𝘁 𝗮 𝗵𝗲𝗮𝗱𝘀-𝘂𝗽

If anyone has a Draytek Router, you maybe experiencing Boot Loops
https://www.ispreview.co.uk/index.php/2025/03/broadband-isps-report-uk-connectivity-problems-with-vulnerable-draytek-routers.html

The Draytek website is down, so Firmware upgrades are currently unavailable. This looks like a hack tbh.

#Draytek #Router #Broadband

Are there any test/diagnosis #VoIP servers available? I'm having trouble getting our #Draytek Vigor 2850v to connect to our @aaisp #SIP account: it is failing *somewhere* : I suspect the router just isn't trying to connect, but have 0 diagnosis information

Undocumented DrayTek Vulnerabilities Exploited to Hack Hundreds of Orgs https://www.securityweek.com/undocumented-draytek-vulnerabilities-exploited-to-hack-hundreds-of-orgs/ #Malware&Threats #Vulnerabilities #MonstrousMantis #Forescout #DrayTek #ZeroDay

Undocumented DrayTek Vulnerabilities Exploited to Hack Hundreds of Orgs https://www.securityweek.com/undocumented-draytek-vulnerabilities-exploited-to-hack-hundreds-of-orgs/ #Malware&Threats #Vulnerabilities #MonstrousMantis #Forescout #DrayTek #ZeroDay

Undocumented DrayTek Vulnerabilities Exploited to Hack Hundreds of Orgs https://www.securityweek.com/undocumented-draytek-vulnerabilities-exploited-to-hack-hundreds-of-orgs/ #Malware&Threats #Vulnerabilities #MonstrousMantis #Forescout #DrayTek #ZeroDay

Undocumented DrayTek Vulnerabilities Exploited to Hack Hundreds of Orgs https://www.securityweek.com/undocumented-draytek-vulnerabilities-exploited-to-hack-hundreds-of-orgs/ #Malware&Threats #Vulnerabilities #MonstrousMantis #Forescout #DrayTek #ZeroDay

Undocumented DrayTek Vulnerabilities Exploited to Hack Hundreds of Orgs https://www.securityweek.com/undocumented-draytek-vulnerabilities-exploited-to-hack-hundreds-of-orgs/ #Malware&Threats #Vulnerabilities #MonstrousMantis #Forescout #DrayTek #ZeroDay

Undocumented DrayTek Vulnerabilities Exploited to Hack Hundreds of Orgs https://www.securityweek.com/undocumented-draytek-vulnerabilities-exploited-to-hack-hundreds-of-orgs/ #Malware&Threats #Vulnerabilities #MonstrousMantis #Forescout #DrayTek #ZeroDay

Bei den ganzen Features wirkt eine #Fritzbox für den gleichen Preis schon wie ein Scam ​:peepoClown:​
https://www.youtube.com/watch?v=WWfdBl1wIEE
#Draytek

#BSI WID-SEC-2024-3314: [NEU] [UNGEPATCHT] [kritisch] #DrayTek #Vigor: Mehrere Schwachstellen ermöglichen Codeausführung

Ein entfernter anonymer oder authentifizierter Angreifer kann mehrere Schwachstellen in DrayTek Vigor ausnutzen, um beliebigen Code auszuführen.

https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3314

#BSI WID-SEC-2024-3290: [NEU] [UNGEPATCHT] [hoch] #DrayTek #Vigor: Schwachstelle ermöglicht Codeausführung

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in DrayTek Vigor ausnutzen, um beliebigen Programmcode auszuführen.

https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3290

Happening now: "Ghosts'n'gadgets: common buffer overflows that still haunt our networks"

• Stanislav Dashevskyi

@hack_lu #hacklu2024 #IoT #Sierra #Draytek

If you own, or support a Draytek Vigor router/modem, it's our turn to do the upgrade dance to mitigate some serious 'shit'.
https://www.draytek.com/support/resources/routers#version
Read more: https://www.draytek.com/about/security-advisory/ #Draytek #Vigor #Router #CVE-2024-46550 #CVE-2024-46568, #CVE-2024-46571, #CVE-2024-46580 #CVE-2024-46586, #CVE-2024-46588 ~ #CVE-2024-46598
#CVE-2024-41583 to #CVE-2024-41596

If you own, or support a Draytek Vigor router/modem, it's our turn to do the upgrade dance to mitigate some serious 'shit'.
https://www.draytek.com/support/resources/routers#version
Read more: https://www.draytek.com/about/security-advisory/ #Draytek #Vigor #Router #CVE-2024-46550 #CVE-2024-46568, #CVE-2024-46571, #CVE-2024-46580 #CVE-2024-46586, #CVE-2024-46588 ~ #CVE-2024-46598
#CVE-2024-41583 to #CVE-2024-41596

Phew, luckily my regular DSL modem firmware update was up this week, I had completely missed this one: https://www.draytek.com/about/security-advisory/cross-site-scripting,-denial-of-service-and-remote-code-execution-vulnerabilities

If you've got a Draytek router/modem, you might want to check whether you've got new firmware available as well.

#HomeLab #DrayTek

CISA Flags Multiple Critical Vulnerabilities Exposed Across Major Platforms https://cyble.com/blog/cisa-flags-multiple-critical-vulnerabilities-exposed-across-major-platforms/ #ZimbraCollaboration #Vulnerability #CVE202445519 #DrayTek #Ivanti #SAP

Security Week 2441: уязвимости в роутерах DrayTek

На прошлой неделе компания Forescout выложила подробный отчет об обнаружении 14 уязвимостей в роутерах тайваньской компании DrayTek, используемых, как правило, в корпоративном окружении. Одна из уязвимостей имеет максимальный рейтинг 10 баллов по шкале CVSS v3 и может приводить к выполнению произвольного кода. Всего уязвимостям подвержены 24 модели роутеров данного производителя, из которых 11 официально более не поддерживаются производителем. Впрочем, несмотря на это, обновления прошивок, устраняющих уязвимости, выпущены для всех затронутых устройств и доступны на сайте производителя. В устаревших роутерах была закрыта только одна, наиболее опасная, уязвимость.

https://habr.com/ru/companies/kaspersky/articles/848744/

#DrayTek

Critical Vulnerabilities Expose Nearly 1 Million DrayTek Routers Globally https://hackread.com/1-million-draytek-routers-critical-vulnerabilities/ #Cybersecurity #Vulnerability #Security #DrayTek #Botnet #Router #DoS #RCE

Nieuwe kwetsbaarheden ontdekt in draytek-routers: meer dan 700.000 apparaten blootgesteld aan hackaanvallen https://www.trendingtech.news/trending-news/2024/10/40125/nieuwe-kwetsbaarheden-ontdekt-in-draytek-routers-meer-dan-700-000-apparaten-blootgesteld-aan-hackaanvallen #DrayTek #kwetsbaarheden #cybersecurity #routers #beveiligingslekken #Trending #News #Nieuws

also die FritzBox hat heute mal wieder ganz ganz laut gerufen - bei nächsten Hardware Wechsel bitte nicht wieder was von uns kaufen.


Ich hab die Meldung erhalten, das bei mir immer wieder mal besetzt sei - was aber nicht möglich ist. Ach die Box meint so ab und an mal einen Masterreboot machen zu wollen.

Ursache der Speicher ist voll gelaufen und das hat man auch nur bemerkt wenn man auf die Webseite zugreifen wollte.


Also Fritz ihr hab euch gerade aus dem Rennen gebracht. Weil für den Preis was ich für diese Boxen verlangt - sollte das auch anständig funktionieren.

Da ist doch #Draytek nun ziemlich hoch im Kurs gestiegen.


#fritzbox #speicher #voll #hardware

Hat hier jemand #erfahrungen mit den Geräten von #Draytek

Insbesondere dem Vigor 167 oder dem Vigor 2765?

Vor allem letzterer in Verbindung mit einem Anschluss der #DGF über die WAN Schnittstelle?

#nutzerwissen
#erfahrungen

Hat hier jemand #erfahrungen mit den Geräten von #Draytek

Insbesondere dem Vigor 167 oder dem Vigor 2765?

Vor allem letzterer in Verbindung mit einem Anschluss der #DGF über die WAN Schnittstelle?

#nutzerwissen
#erfahrungen

Hat hier jemand #erfahrungen mit den Geräten von #Draytek

Insbesondere dem Vigor 167 oder dem Vigor 2765?

Vor allem letzterer in Verbindung mit einem Anschluss der #DGF über die WAN Schnittstelle?

#nutzerwissen
#erfahrungen

Hat hier jemand #erfahrungen mit den Geräten von #Draytek

Insbesondere dem Vigor 167 oder dem Vigor 2765?

Vor allem letzterer in Verbindung mit einem Anschluss der #DGF über die WAN Schnittstelle?

#nutzerwissen
#erfahrungen