DrayTek Unauthenticated User to Root Vulnerability

Channel:
United Kingdom quidsup
Subscribers:
54,700
Published on ● Video Link: https://www.youtube.com/watch?v=EQWsR61iKzk


Duration: 5:23
3,073 views
104

There has been a recent vulnerability (CVE-2020-8515) in multiple DrayTek router / firewall products which allows an unauthenticated user to trivially gain root access via a remotely accessible admin page. Typical it would happen not long after I purchased a DrayTek Vigor2862 Router.

Sources:
https://nvd.nist.gov/vuln/detail/CVE-2020-8515
https://www.skullarmy.net/2020/01/draytek-unauthenticated-rce-in-draytek.html
https://packetstormsecurity.com/files/156979/DrayTek-Vigor2960-Vigor3900-Vigor300B-Remote-Command-Execution.html
https://www.draytek.com/about/security-advisory/vigor3900-/-vigor2960-/-vigor300b-router-web-management-page-vulnerability-(cve-2020-8515)/
https://www.draytek.com/about/security-advisory

Wallpaper: https://www.pling.com/p/1374077/

Like my channel? Please help support it:
Patreon: https://www.patreon.com/quidsup
Paypal: https://www.paypal.me/quidsup

Follow me on Social Media
Twitter: https://twitter.com/quidsup
MeWe: https://mewe.com/i/quidsup
Minds: https://minds.com/quidsup

#DrayTek #Vulnerability #CyberSecurity



Other Videos By quidsup


2020-05-16Problems of Downloading from Fake Sources
2020-05-12Do I Need A Firewall in Linux
2020-05-08Life in Lockdown Day 46
2020-05-06Pop!_OS 20.04 Review – Very Pretty!
2020-05-01Xubuntu 20.04 Review - Some More Work Needed
2020-04-27Ubuntu MATE 20.04 Review - Best of the Ubuntu Derivatives
2020-04-25Kubuntu 20.04 Review - LTS all round
2020-04-24Normal vs Minimal Install of Ubuntu
2020-04-23Ubuntu 20.04 Review
2020-04-2211 Things to do After Installing Ubuntu 20.04
2020-04-18DrayTek Unauthenticated User to Root Vulnerability
2020-04-15Whats New in Ubuntu 20.04
2020-04-12How Windows Used to Store Passwords
2020-04-08Good Intentions to Fight Bad Actors in a Time of Crisis
2020-04-05Initial Look at Kubuntu 20.04 Beta
2020-04-01Typing Hello World ASMR
2020-03-31antiX 19.2 Review – Good for Old Computers
2020-03-27How Linux User Passwords are Generated and Securely Stored
2020-03-22Raspberry Pi Imager – GUI for Writing to MicroSD Card
2020-03-18The State of Open Source Security Vulnerabilities
2020-03-15NoTrack Sorting Algorithm Update


Tags:
DrayTek
Router
Vulnerability
CyberSecurity
News
Computer
Linux
Quidsup