[NEU] [kritisch] DrayTek Vigor: Mehrere Schwachstellen ermöglichen Codeausführung
Critical-rated RCE flaws in DrayTek Vigor routers—a staple of European SME branch networks—demand urgent firmware updates before threat actors weaponise the vulnerabilities.
Summary written by editorial AI · Source link below
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in DrayTek Vigor ausnutzen, um Dateien zu manipulieren und beliebigen Programmcode auszuführen.
Editorial Analysis
DrayTek routers are prevalent at European SME perimeters; critical RCE at the edge can be mass-exploited rapidly, as seen in past DrayTek campaigns.
Immediately patch all DrayTek Vigor firmware, disable WAN-facing management interfaces, and audit firewall rules for exposed admin ports.
Critical vulnerabilities in widely deployed branch-office routers could allow attackers direct entry into corporate networks.
Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.
External link — opens at CERT-Bund (BSI) in a new tab.
More from the Vulnerabilities Desk
- Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers1d
- Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software2d
- Abandoned Popcorn Time app exposed millions of devices to RCE attacks3d
- HPE patches eight max severity RCE and auth bypass AOS flaws3d
- Compromised TLS Certificates3d