critical
9.8
CWE
798
Advisory Published
Updated

CVE-2023-33778

First published: Thu Jun 01 2023(Updated: )

Draytek Vigor Routers firmware versions below 3.9.6/4.2.4, Access Points firmware versions below v1.4.0, Switches firmware versions below 2.6.7, and Myvigor firmware versions below 2.3.2 were discovered to use hardcoded encryption keys which allows attackers to bind any affected device to their own account. Attackers are then able to create WCF and DrayDDNS licenses and synchronize them from the website.

Credit: cve@mitre.org cve@mitre.org

Affected SoftwareAffected VersionHow to fix
Draytek Myvigor<2.3.2
Draytek Vigorswitch Pq2200xb Firmware<2.6.7
Draytek Vigorswitch Pq2200xb Firmware
Draytek Vigorswitch Pq2121x<2.6.7
Draytek Vigorswitch Pq2121x Firmware
DrayTek VigorSwitch P2540xs Firmware<2.6.7
Draytek Vigorswitch P2540xs Firmware
Draytek Vigorswitch P2280x<2.6.7
Draytek Vigorswitch P2280x Firmware
Draytek Vigorswitch P2100 Firmware<2.6.7
Draytek Vigorswitch P2100 Firmware
DrayTek VigorSwitch Q2200x Firmware<2.6.7
Draytek Vigorswitch Q2200x Firmware
Draytek Vigorswitch Q2121x Firmware<2.6.7
Draytek Vigorswitch Q2121x Firmware
DrayTek VigorSwitch P2540xs Firmware<2.6.7
Draytek Vigorswitch G2540xs
Draytek Vigorswitch G2280x Firmware<2.6.7
Draytek Vigorswitch G2280x Firmware
Draytek Vigorswitch G2121<2.6.7
Draytek Vigorswitch G2121 Firmware
Draytek Vigorswitch G2100 Firmware<2.6.7
Draytek Vigorswitch G2100 Firmware
Draytek Vigorswitch Fx2120 Firmware<2.6.7
Draytek Vigorswitch Fx2120 Firmware
DrayTek VigorSwitch P1282 Firmware<2.6.7
Draytek Vigorswitch P1282 Firmware
Draytek Vigorswitch G1282<2.6.7
Draytek Vigorswitch G1282 Firmware
Draytek Vigorswitch G1085 Firmware<2.6.7
Draytek Vigorswitch G1085
Draytek Vigorswitch G1080 Firmware<2.6.7
Draytek Vigorswitch G1080 Firmware
Draytek Vigorap 903 Firmware<1.4.0
Draytek Vigorap 903 Firmware
Draytek Vigorap 912c Firmware<1.4.0
Draytek Vigorap 912c Firmware
Draytek VigorAP 918R Firmware<1.4.0
Draytek VigorAP 918R Firmware
Draytek VigorAP 1060C Firmware<1.4.0
Draytek VigorAP 1060C Firmware
Draytek Vigorap 906 Firmware<1.4.0
Draytek Vigorap 906 Firmware
Draytek Vigorap 960c Firmware<1.4.0
Draytek Vigorap 960c Firmware
Draytek VigorAP 1000C<1.4.0
Draytek VigorAP 1000C
Draytek Vigor2766 Firmware<3.9.6
Draytek Vigor2766 Firmware>=4.0.0<4.2.4
Draytek Vigor2766 Firmware
Draytek Vigor2766 Firmware<3.9.6
Draytek Vigor2766 Firmware>=4.0.0<4.2.4
Draytek Vigor2766 Firmware
Draytek Vigor2766 Firmware<3.9.6
Draytek Vigor2766 Firmware>=4.0.0<4.2.4
Draytek Vigor2766vac Firmware
Draytek Vigor2765ax Firmware<3.9.6
Draytek Vigor2765ax Firmware>=4.0.0<4.2.4
Draytek Vigor2765
Draytek Vigor2765vac Firmware<3.9.6
Draytek Vigor2765vac Firmware>=4.0.0<4.2.4
Draytek Vigor2765
Draytek Vigor2765<3.9.6
Draytek Vigor2765>=4.0.0<4.2.4
Draytek Vigor2765
Draytek Vigor2763ac Firmware<3.9.6
Draytek Vigor2763ac Firmware>=4.0.0<4.2.4
Draytek Vigor2763ac Firmware
Draytek Vigor2620L Firmware<3.9.6
Draytek Vigor2620L Firmware>=4.0.0<4.2.4
Draytek Vigor2620l Firmware
Draytek Vigor2620L Firmware<3.9.6
Draytek Vigor2620L Firmware>=4.0.0<4.2.4
Draytek Vigor2620ln Firmware
Draytek VigorLTE 200N Firmware<3.9.6
Draytek VigorLTE 200N Firmware>=4.0.0<4.2.4
DrayTek VigorLTE 200n
DrayTek Vigor2915ac Firmware<3.9.6
DrayTek Vigor2915ac Firmware>=4.0.0<4.2.4
Draytek Vigor2915ac Firmware
Draytek Vigor2135ac<3.9.6
Draytek Vigor2135ac>=4.0.0<4.2.4
Draytek Vigor2135ac Firmware
Draytek Vigor2135ax Firmware<3.9.6
Draytek Vigor2135ax Firmware>=4.0.0<4.2.4
Draytek Vigor2135ax Firmware
Draytek Vigor2135 Firmware<3.9.6
Draytek Vigor2135 Firmware>=4.0.0<4.2.4
Draytek Vigor2135 Firmware
DrayTek Vigor2135VAC Firmware<3.9.6
DrayTek Vigor2135VAC Firmware>=4.0.0<4.2.4
DrayTek Vigor2135VAC Firmware
Draytek Vigor2866 Firmware<3.9.6
Draytek Vigor2866 Firmware>=4.0.0<4.2.4
DrayTek Vigor Routers
Draytek Vigor2866LAC Firmware<3.9.6
Draytek Vigor2866LAC Firmware>=4.0.0<4.2.4
Draytek Vigor2866ac Firmware
Draytek Vigor2866ac Firmware<3.9.6
Draytek Vigor2866ac Firmware>=4.0.0<4.2.4
Draytek Vigor 2866
Draytek Vigor2866 Firmware<3.9.6
Draytek Vigor2866 Firmware>=4.0.0<4.2.4
Draytek Vigor 2866
Draytek Vigor2866LAC Firmware<3.9.6
Draytek Vigor2866LAC Firmware>=4.0.0<4.2.4
Draytek Vigor 2866
Draytek Vigor2865ac Firmware<3.9.6
Draytek Vigor2865ac Firmware>=4.0.0<4.2.4
Draytek Vigor2865ac Firmware
Draytek Vigor2865ax Firmware<3.9.6
Draytek Vigor2865ax Firmware>=4.0.0<4.2.4
Draytek Vigor2865ax Firmware
Draytek Vigor2865ac Firmware<3.9.6
Draytek Vigor2865ac Firmware>=4.0.0<4.2.4
DrayTek Vigor2865VAC
Draytek Vigor2865L Firmware<3.9.6
Draytek Vigor2865L Firmware>=4.0.0<4.2.4
Draytek Vigor2865L Firmware
Draytek Vigor2865LAC Firmware<3.9.6
Draytek Vigor2865LAC Firmware>=4.0.0<4.2.4
Draytek Vigor2865lac Firmware
Draytek Vigor2862n Firmware<3.9.6
Draytek Vigor2862n Firmware>=4.0.0<4.2.4
Draytek Vigor2862bn
Draytek Vigor 2862ac Firmware<3.9.6
Draytek Vigor 2862ac Firmware>=4.0.0<4.2.4
Draytek Vigor2862
Draytek Vigor2862VAC Firmware<3.9.6
Draytek Vigor2862VAC Firmware>=4.0.0<4.2.4
Draytek Vigor 2862
Draytek Vigor2862b Firmware<3.9.6
Draytek Vigor2862b Firmware>=4.0.0<4.2.4
Draytek Vigor2862
Draytek Vigor 2862BN Firmware<3.9.6
Draytek Vigor 2862BN Firmware>=4.0.0<4.2.4
Draytek Vigor 2862BN Firmware
Draytek Vigor2862L Firmware<3.9.6
Draytek Vigor2862L Firmware>=4.0.0<4.2.4
Draytek Vigor2862
DrayTek Vigor2862LAC Firmware<3.9.6
DrayTek Vigor2862LAC Firmware>=4.0.0<4.2.4
DrayTek Vigor2862LAC Firmware
Draytek Vigor2862ln Firmware<3.9.6
Draytek Vigor2862ln Firmware>=4.0.0<4.2.4
Draytek Vigor2862
Draytek Vigor2832n Firmware<3.9.6
Draytek Vigor2832n Firmware>=4.0.0<4.2.4
Draytek Vigor2832n Firmware
Draytek Vigor2927ax Firmware<3.9.6
Draytek Vigor2927ax Firmware>=4.0.0<4.2.4
Draytek Vigor2927
Draytek Vigor2927LAC Firmware<3.9.6
Draytek Vigor2927LAC Firmware>=4.0.0<4.2.4
Draytek Vigor2927ac Firmware
Draytek Vigor2927VAC<3.9.6
Draytek Vigor2927VAC>=4.0.0<4.2.4
Draytek Vigor 2927
DrayTek Vigor2927F Firmware<3.9.6
DrayTek Vigor2927F Firmware>=4.0.0<4.2.4
Draytek Vigor2927
Draytek Vigor2927l Firmware<3.9.6
Draytek Vigor2927l Firmware>=4.0.0<4.2.4
Draytek Vigor 2927
Draytek Vigor2927LAC Firmware<3.9.6
Draytek Vigor2927LAC Firmware>=4.0.0<4.2.4
Draytek Vigor2927
Draytek Vigor2926 Plus Firmware<3.9.6
Draytek Vigor2926 Plus Firmware>=4.0.0<4.2.4
Draytek Vigor2926 Plus Firmware
Draytek Vigor2962 Firmware<3.9.6
Draytek Vigor2962 Firmware>=4.0.0<4.2.4
Draytek Vigor2962 Firmware
Draytek Vigor1000b Firmware<3.9.6
Draytek Vigor1000b Firmware>=4.0.0<4.2.4
Draytek Vigor1000b Firmware
Draytek Vigor3910 Firmware<3.9.6
Draytek Vigor3910 Firmware>=4.0.0<4.2.4
DrayTek Vigor Routers
Draytek Vigor165 Firmware<3.9.6
Draytek Vigor165 Firmware>=4.0.0<4.2.4
Draytek Vigor165 Firmware
Draytek Vigor166 Firmware<3.9.6
Draytek Vigor166 Firmware>=4.0.0<4.2.4
Draytek Vigor166 Firmware
Draytek Vigor130 Firmware<3.9.6
Draytek Vigor130 Firmware>=4.0.0<4.2.4
Draytek Vigor130 Firmware
Draytek Vigor167 Firmware<3.9.6
Draytek Vigor167 Firmware>=4.0.0<4.2.4
DrayTek Vigor Routers
All of
Draytek Vigorswitch Pq2200xb Firmware<2.6.7
Draytek Vigorswitch Pq2200xb Firmware
All of
Draytek Vigorswitch Pq2121x<2.6.7
Draytek Vigorswitch Pq2121x Firmware
All of
DrayTek VigorSwitch P2540xs Firmware<2.6.7
Draytek Vigorswitch P2540xs Firmware
All of
Draytek Vigorswitch P2280x<2.6.7
Draytek Vigorswitch P2280x Firmware
All of
Draytek Vigorswitch P2100 Firmware<2.6.7
Draytek Vigorswitch P2100 Firmware
All of
DrayTek VigorSwitch Q2200x Firmware<2.6.7
Draytek Vigorswitch Q2200x Firmware
All of
Draytek Vigorswitch Q2121x Firmware<2.6.7
Draytek Vigorswitch Q2121x Firmware
All of
DrayTek VigorSwitch P2540xs Firmware<2.6.7
Draytek Vigorswitch G2540xs
All of
Draytek Vigorswitch G2280x Firmware<2.6.7
Draytek Vigorswitch G2280x Firmware
All of
Draytek Vigorswitch G2121<2.6.7
Draytek Vigorswitch G2121 Firmware
All of
Draytek Vigorswitch G2100 Firmware<2.6.7
Draytek Vigorswitch G2100 Firmware
All of
Draytek Vigorswitch Fx2120 Firmware<2.6.7
Draytek Vigorswitch Fx2120 Firmware
All of
DrayTek VigorSwitch P1282 Firmware<2.6.7
Draytek Vigorswitch P1282 Firmware
All of
Draytek Vigorswitch G1282<2.6.7
Draytek Vigorswitch G1282 Firmware
All of
Draytek Vigorswitch G1085 Firmware<2.6.7
Draytek Vigorswitch G1085
All of
Draytek Vigorswitch G1080 Firmware<2.6.7
Draytek Vigorswitch G1080 Firmware
All of
Draytek Vigorap 903 Firmware<1.4.0
Draytek Vigorap 903 Firmware
All of
Draytek Vigorap 912c Firmware<1.4.0
Draytek Vigorap 912c Firmware
All of
Draytek VigorAP 918R Firmware<1.4.0
Draytek VigorAP 918R Firmware
All of
Draytek VigorAP 1060C Firmware<1.4.0
Draytek VigorAP 1060C Firmware
All of
Draytek Vigorap 906 Firmware<1.4.0
Draytek Vigorap 906 Firmware
All of
Draytek Vigorap 960c Firmware<1.4.0
Draytek Vigorap 960c Firmware
All of
Draytek VigorAP 1000C<1.4.0
Draytek VigorAP 1000C
All of
Any of
Draytek Vigor2766 Firmware<3.9.6
Draytek Vigor2766 Firmware>=4.0.0<4.2.4
Draytek Vigor2766 Firmware
All of
Any of
Draytek Vigor2766 Firmware<3.9.6
Draytek Vigor2766 Firmware>=4.0.0<4.2.4
Draytek Vigor2766 Firmware
All of
Any of
Draytek Vigor2766 Firmware<3.9.6
Draytek Vigor2766 Firmware>=4.0.0<4.2.4
Draytek Vigor2766vac Firmware
All of
Any of
Draytek Vigor2765ax Firmware<3.9.6
Draytek Vigor2765ax Firmware>=4.0.0<4.2.4
Draytek Vigor2765
All of
Any of
Draytek Vigor2765vac Firmware<3.9.6
Draytek Vigor2765vac Firmware>=4.0.0<4.2.4
Draytek Vigor2765
All of
Any of
Draytek Vigor2765<3.9.6
Draytek Vigor2765>=4.0.0<4.2.4
Draytek Vigor2765
All of
Any of
Draytek Vigor2763ac Firmware<3.9.6
Draytek Vigor2763ac Firmware>=4.0.0<4.2.4
Draytek Vigor2763ac Firmware
All of
Any of
Draytek Vigor2620L Firmware<3.9.6
Draytek Vigor2620L Firmware>=4.0.0<4.2.4
Draytek Vigor2620l Firmware
All of
Any of
Draytek Vigor2620L Firmware<3.9.6
Draytek Vigor2620L Firmware>=4.0.0<4.2.4
Draytek Vigor2620ln Firmware
All of
Any of
Draytek VigorLTE 200N Firmware<3.9.6
Draytek VigorLTE 200N Firmware>=4.0.0<4.2.4
DrayTek VigorLTE 200n
All of
Any of
DrayTek Vigor2915ac Firmware<3.9.6
DrayTek Vigor2915ac Firmware>=4.0.0<4.2.4
Draytek Vigor2915ac Firmware
All of
Any of
Draytek Vigor2135ac<3.9.6
Draytek Vigor2135ac>=4.0.0<4.2.4
Draytek Vigor2135ac Firmware
All of
Any of
Draytek Vigor2135ax Firmware<3.9.6
Draytek Vigor2135ax Firmware>=4.0.0<4.2.4
Draytek Vigor2135ax Firmware
All of
Any of
Draytek Vigor2135 Firmware<3.9.6
Draytek Vigor2135 Firmware>=4.0.0<4.2.4
Draytek Vigor2135 Firmware
All of
Any of
DrayTek Vigor2135VAC Firmware<3.9.6
DrayTek Vigor2135VAC Firmware>=4.0.0<4.2.4
DrayTek Vigor2135VAC Firmware
All of
Any of
Draytek Vigor2866 Firmware<3.9.6
Draytek Vigor2866 Firmware>=4.0.0<4.2.4
DrayTek Vigor Routers
All of
Any of
Draytek Vigor2866LAC Firmware<3.9.6
Draytek Vigor2866LAC Firmware>=4.0.0<4.2.4
Draytek Vigor2866ac Firmware
All of
Any of
Draytek Vigor2866ac Firmware<3.9.6
Draytek Vigor2866ac Firmware>=4.0.0<4.2.4
Draytek Vigor 2866
All of
Any of
Draytek Vigor2866 Firmware<3.9.6
Draytek Vigor2866 Firmware>=4.0.0<4.2.4
Draytek Vigor 2866
All of
Any of
Draytek Vigor2866LAC Firmware<3.9.6
Draytek Vigor2866LAC Firmware>=4.0.0<4.2.4
Draytek Vigor 2866
All of
Any of
Draytek Vigor2865ac Firmware<3.9.6
Draytek Vigor2865ac Firmware>=4.0.0<4.2.4
Draytek Vigor2865ac Firmware
All of
Any of
Draytek Vigor2865ax Firmware<3.9.6
Draytek Vigor2865ax Firmware>=4.0.0<4.2.4
Draytek Vigor2865ax Firmware
All of
Any of
Draytek Vigor2865ac Firmware<3.9.6
Draytek Vigor2865ac Firmware>=4.0.0<4.2.4
DrayTek Vigor2865VAC
All of
Any of
Draytek Vigor2865L Firmware<3.9.6
Draytek Vigor2865L Firmware>=4.0.0<4.2.4
Draytek Vigor2865L Firmware
All of
Any of
Draytek Vigor2865LAC Firmware<3.9.6
Draytek Vigor2865LAC Firmware>=4.0.0<4.2.4
Draytek Vigor2865lac Firmware
All of
Any of
Draytek Vigor2862n Firmware<3.9.6
Draytek Vigor2862n Firmware>=4.0.0<4.2.4
Draytek Vigor2862bn
All of
Any of
Draytek Vigor 2862ac Firmware<3.9.6
Draytek Vigor 2862ac Firmware>=4.0.0<4.2.4
Draytek Vigor2862
All of
Any of
Draytek Vigor2862VAC Firmware<3.9.6
Draytek Vigor2862VAC Firmware>=4.0.0<4.2.4
Draytek Vigor 2862
All of
Any of
Draytek Vigor2862b Firmware<3.9.6
Draytek Vigor2862b Firmware>=4.0.0<4.2.4
Draytek Vigor2862
All of
Any of
Draytek Vigor 2862BN Firmware<3.9.6
Draytek Vigor 2862BN Firmware>=4.0.0<4.2.4
Draytek Vigor 2862BN Firmware
All of
Any of
Draytek Vigor2862L Firmware<3.9.6
Draytek Vigor2862L Firmware>=4.0.0<4.2.4
Draytek Vigor2862
All of
Any of
DrayTek Vigor2862LAC Firmware<3.9.6
DrayTek Vigor2862LAC Firmware>=4.0.0<4.2.4
DrayTek Vigor2862LAC Firmware
All of
Any of
Draytek Vigor2862ln Firmware<3.9.6
Draytek Vigor2862ln Firmware>=4.0.0<4.2.4
Draytek Vigor2862
All of
Any of
Draytek Vigor2832n Firmware<3.9.6
Draytek Vigor2832n Firmware>=4.0.0<4.2.4
Draytek Vigor2832n Firmware
All of
Any of
Draytek Vigor2927ax Firmware<3.9.6
Draytek Vigor2927ax Firmware>=4.0.0<4.2.4
Draytek Vigor2927
All of
Any of
Draytek Vigor2927LAC Firmware<3.9.6
Draytek Vigor2927LAC Firmware>=4.0.0<4.2.4
Draytek Vigor2927ac Firmware
All of
Any of
Draytek Vigor2927VAC<3.9.6
Draytek Vigor2927VAC>=4.0.0<4.2.4
Draytek Vigor 2927
All of
Any of
DrayTek Vigor2927F Firmware<3.9.6
DrayTek Vigor2927F Firmware>=4.0.0<4.2.4
Draytek Vigor2927
All of
Any of
Draytek Vigor2927l Firmware<3.9.6
Draytek Vigor2927l Firmware>=4.0.0<4.2.4
Draytek Vigor 2927
All of
Any of
Draytek Vigor2927LAC Firmware<3.9.6
Draytek Vigor2927LAC Firmware>=4.0.0<4.2.4
Draytek Vigor2927
All of
Any of
Draytek Vigor2926 Plus Firmware<3.9.6
Draytek Vigor2926 Plus Firmware>=4.0.0<4.2.4
Draytek Vigor2926 Plus Firmware
All of
Any of
Draytek Vigor2962 Firmware<3.9.6
Draytek Vigor2962 Firmware>=4.0.0<4.2.4
Draytek Vigor2962 Firmware
All of
Any of
Draytek Vigor1000b Firmware<3.9.6
Draytek Vigor1000b Firmware>=4.0.0<4.2.4
Draytek Vigor1000b Firmware
All of
Any of
Draytek Vigor3910 Firmware<3.9.6
Draytek Vigor3910 Firmware>=4.0.0<4.2.4
DrayTek Vigor Routers
All of
Any of
Draytek Vigor165 Firmware<3.9.6
Draytek Vigor165 Firmware>=4.0.0<4.2.4
Draytek Vigor165 Firmware
All of
Any of
Draytek Vigor166 Firmware<3.9.6
Draytek Vigor166 Firmware>=4.0.0<4.2.4
Draytek Vigor166 Firmware
All of
Any of
Draytek Vigor130 Firmware<3.9.6
Draytek Vigor130 Firmware>=4.0.0<4.2.4
Draytek Vigor130 Firmware
All of
Any of
Draytek Vigor167 Firmware<3.9.6
Draytek Vigor167 Firmware>=4.0.0<4.2.4
DrayTek Vigor Routers

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2023-33778?

    CVE-2023-33778 has a severity rating that may vary, but it is generally considered critical due to the use of hardcoded encryption keys allowing unauthorized access.

  • How do I fix CVE-2023-33778?

    To address CVE-2023-33778, update the firmware of affected Draytek devices to the latest versions available.

  • Which devices are affected by CVE-2023-33778?

    CVE-2023-33778 affects Draytek Vigor Routers, Access Points, and Switches running specific firmware versions below their respective thresholds.

  • What impact does CVE-2023-33778 have on device security?

    The vulnerability allows attackers to use hardcoded encryption keys to take control of affected devices, compromising network security.

  • How can I verify my device is vulnerable to CVE-2023-33778?

    Check the firmware version of your Draytek devices against the specified vulnerable versions in CVE-2023-33778.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203