Hm, why are so many DrayTek routers stuck in a bootloop?
ID: 71e00692-12e2-583c-9a1e-6df3d49c5785
STIX ID: report--71e00692-12e2-583c-9a1e-6df3d49c5785
Feed Name: The Register (Security)
Multiple ISPs reported large numbers of DrayTek gateways repeatedly rebooting and going offline, likely tied to recently disclosed and patched buffer-overflow vulnerabilities in DrayTek firmware; the vendor and ISPs advise firmware upgrades (including TFTP recovery) and disabling remote access/SSL VPN on unpatched devices. Incidents were observed in the UK and reported across Australia and Asia, and the story notes a historical botnet of compromised DrayTek devices, suggesting possible active exploitation of unpatched routers.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
