Forescout researchers have uncovered 14 new vulnerabilities in DrayTek routers, affecting over 700,000 devices in 168 countries. These vulnerabilities could allow attackers to gain full control of vulnerable devices, posing significant risks to individuals and organizations. The vulnerabilities include two critical flaws, nine high-severity flaws, and three medium-severity flaws. The vulnerabilities impact both residential and enterprise routers, highlighting the widespread nature of the threat. Organizations and individuals using DrayTek routers should prioritize updating their devices to the latest firmware versions to mitigate the risk of being exploited. This incident underscores the importance of keeping devices up-to-date and implementing robust security measures to protect against vulnerabilities.
Forescout Technologies has identified 14 vulnerabilities, including two critical flaws, in DrayTek routers used by businesses and residential users. The vulnerabilities could allow attackers to compromise the devices and gain complete control, potentially affecting over 700,000 devices in 168 countries. Two of the vulnerabilities have been rated as critical, while nine are rated as high severity and three as medium severity. DrayTek has released patches for the vulnerabilities, but security teams are urged to update their routers as soon as possible to mitigate the risks. This incident highlights the importance of keeping network equipment up-to-date and patching vulnerabilities promptly. Exploitation of these vulnerabilities could lead to data breaches, denial of service attacks, and disruption of network operations.
Forescout Technologies released a report, ‘DRAY:BREAK’, identifying 14 vulnerabilities affecting DrayTek routers, including two critical vulnerabilities that could lead to full device compromise. These vulnerabilities impact both residential and enterprise routers, affecting over 700,000 devices across 168 countries. The report highlights the risks associated with outdated or insecure routers, particularly for organizations with large deployments of DrayTek routers. It emphasizes the need for immediate patching and security updates to protect these devices from exploitation. Organizations are urged to take proactive steps to secure their DrayTek routers and prevent potential data breaches or network disruption.