Draytek Security Notice

[Embattle]

As a user of a Vigor 130 I got the following notice which can affect a lot of Draytek products - https://www.draytek.com/en/about/ne...of-urgent-security-updates-to-draytek-routers

 

[AndreiV]

As a user of a Vigor 130 I got the following notice which can affect a lot of Draytek products - https://www.draytek.com/en/about/ne...of-urgent-security-updates-to-draytek-routers

Already posted :

https://www.snbforums.com/threads/security-advisory-csrf-dns-attacks-draytek.46668/

They have rushed out new firmware which apparently only adds a captcha to the log in , bet that won't help much. Also people running 2960's are seeing the same attack but DrayTek deny that model is affected.

The DrayTek log in is a joke, you can't change the username from default "admin".

DrayTek also still use telnet .........

 

[coxhaus]

If you hit a bad DNS server they can load anything they want on your PC. I would recommend creating an access list to block all other DNS than your local ISP's DNS. This way if your DNS changes then the PCs go off line because they are using a blocked DNS server.