CVE Watch5 jul 2026

CVE-2025-44643

Certain Draytek products are affected by Insecure Configuration. This affects AP903 v1.4.18 and AP912C v1.4.9 and AP918R v1.4.9. The setting

CVSS

8.6

Alto

EPSS

0.2%

p15

KEV

—

Exploit Today

0-100

Publicado: 4 ago 2025 · Última mod.: 5 jul 2026 · CWE-276 · CWE-798

EPSS · 30d

0.2%EPSS · 30 días0.2%

2026-06-302026-07-18

Descripción técnica

Certain Draytek products are affected by Insecure Configuration. This affects AP903 v1.4.18 and AP912C v1.4.9 and AP918R v1.4.9. The setting of the password property in the ripd.conf configuration file sets a hardcoded weak password, posing a security risk. An attacker with network access could exploit this to gain unauthorized control over the routing daemon, potentially altering network routes or intercepting traffic.

Referencias oficiales

www.notion.sohttps://www.notion.so/Misconfiguration-in-Draytek-AP903-23a54a1113e780aca7f2d21dbdab9db8

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2025-292689.8 CRÍ

93.8%

——28ALLNET ALL-RUT22GW v3.3.8 was discovered to store hardcoded credentials in the libicos.so library.14d CVE-2021-426358.1 ALT

91.9%

——28PrinterLogic Web Stack versions 19.1.1.13 SP9 and below use a hardcoded APP_KEY value, leading to pre-auth remote code execution.11d CVE-2021-409048.8 ALT

87.7%

——26The web management console of CheckMK Raw Edition (versions 1.5.0 to 1.6.0) allows a misconfiguration of the web-app Dokuwiki (installed by default), which allows embedded php code. As a result, remote code execution is achieved. Successful exploitation requires access to the web management interface, either with valid credentials or with a hijacked session by a user with the role of administrator.11d CVE-2022-289329.8 CRÍ

79.7%

——24D-Link DSL-G2452DG HW:T1\\tFW:ME_2.00 was discovered to contain insecure permissions.11d CVE-2021-290058.8 ALT

79.3%

——24Insecure permission of chmod command on rConfig server 3.9.6 exists. After installing rConfig apache user may execute chmod as root without password which may let an attacker with low privilege to gain root access on server.11d CVE-2022-366409.8 CRÍ

78.6%

——24influxData influxDB before v1.8.10 contains no authentication mechanism or controls, allowing unauthenticated attackers to execute arbitrary commands. NOTE: the CVE ID assignment is disputed because the vendor's documentation states "If InfluxDB is being deployed on a publicly accessible endpoint, we strongly recommend authentication be enabled. Otherwise the data will be publicly available to any unauthenticated user. The default settings do NOT enable authentication and authorization."11d