Description
An issue in DrayTek Vigor310 devices through 4.3.2.6 allows an attacker to obtain sensitive information because the httpd server of the Vigor management UI uses a static string for seeding the PRNG of OpenSSL.
Advisories 2
- WID-SEC-2024-3086 DrayTek Vigor Router: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 6, 2024
- NCSC-2024-0388 Kwetsbaarheden verholpen in Draytek Vigor routers NCSC-NL (Netherlands) · Oct 4, 2024