DrayTek fixed critical flaws in over 700,000 exposed routers2024-10-02 16:47 by DanielaTags: DrayTek, router
A little over a dozen new security vulnerabilities have been discovered in residential and enterprise routers manufactured by DrayTek that could be exploited to take over susceptible devices. "These vulnerabilities could enable attackers to take control of a router by injecting malicious code, allowing them to persist on the device and use it as a gateway into enterprise networks," Forescout Vedere Labs said in a technical report shared with The Hacker News. Of the 14 security flaws, two are rated critical, nine are rated high, and three are rated medium in severity. The most critical of the shortcomings is a flaw that has been awarded the maximum CVSS score of 10.0. Following responsible disclosure, patches for all the identified flaws have been released by DrayTek, with the max-rated vulnerability also addressed in 11 end-of-life (EoL) models. "Complete protection against the new vulnerabilities requires patching devices running the affected software," Forescout said. "If remote access is enabled on your router, disable it if not needed. Use an access control list (ACL) and two-factor authentication (2FA) if possible." Read more -here-
Post your review/comments
rate:
avg:
|