Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in DrayTek Corp. products - CVE-2024-41594

Vulnerability identifier: #VU97983

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-41594

CWE-ID: CWE-338

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform MitM attack.

The vulnerability exists due to software uses a static string to seed the PRNG in OpenSSL for TLS. A remote attacker can perform MitM attack.

Vigor 2925
Vigor 2860
Vigor 3220
Vigor 2952
Vigor 2762
Vigor 2133
Vigor 2926
Vigor 2862
Vigor LTE200
Vigor 2620
Vigor 165
Vigor 166
Vigor 2962
Vigor 3910
Vigor 1000B
Vigor 3912
Vigor 2766
Vigor 2765
Vigor 2763
Vigor 2135
Vigor 2915
Vigor 2866
Vigor 2865
Vigor 2832

Install updates from vendor's website.

Vigor 2925 - update to 3.9.8
Vigor 2860 - update to 3.9.8
Vigor 3220 - update to 3.9.8.2
Vigor 2952 - update to 3.9.8.2
Vigor LTE200 - update to 3.9.8.9
Vigor 2620 - update to 3.9.8.9
Vigor 2832 - update to 3.9.9
Vigor 2762 - update to 3.9.9
Vigor 2133 - update to 3.9.9
Vigor 2926 - update to 3.9.9.5
Vigor 2862 - update to 3.9.9.5
Vigor 165 - update to 4.2.7
Vigor 166 - update to 4.2.7
Vigor 2962 - update to 4.3.2.8
Vigor 3910 - update to 4.3.2.8
Vigor 1000B - update to 4.3.2.8
Vigor 3912 - update to 4.3.6.1
Vigor 2766 - update to 4.4.5.1
Vigor 2765 - update to 4.4.5.1
Vigor 2763 - update to 4.4.5.1
Vigor 2135 - update to 4.4.5.1
Vigor 2915 - update to 4.4.5.3
Vigor 2866 - update to 4.4.5.3
Vigor 2865 - update to 4.4.5.3

• https://www.forescout.com/resources/draybreak-draytek-research/

• Multiple vulnerabilities in DrayTek products