{"id":89977,"date":"2024-09-24T12:39:59","date_gmt":"2024-09-24T19:39:59","guid":{"rendered":"https:\/\/forescoutstage.wpengine.com\/research-labs\/2024h1-threat-review-copy\/"},"modified":"2024-12-06T08:19:32","modified_gmt":"2024-12-06T16:19:32","slug":"draytek-dray-break","status":"publish","type":"page","link":"https:\/\/www.forescout.com\/research-labs\/draytek-dray-break\/","title":{"rendered":"Dray:Break"},"content":{"rendered":"

Dray:Break<\/h1>\n

Breaking Into DrayTek Routers Before Threat Actors Do It Again<\/h2>\n

In 2024, routers are a primary target for cybercriminals and state-sponsored attackers \u2013 and are the riskiest device category on networks. With this knowledge, we investigated one hardware vendor, DrayTek, with a history of security flaws to help it address its issues and prevent new attacks \u2014 especially when the risk of ransomware and denial of service attacks are so high today.<\/p>\n

Learn what makes them vulnerable, the threat impact \u2013 and how to mitigate, today.<\/p>\n

\u00a0<\/p>\n

Watch Webinar Get The Report<\/p>\n

\u00a0<\/p>\n

<\/p>\n

\n14<\/h3>\n

New Vulnerabilities<\/p>\n

<\/p>\n

\n704K+<\/h3>\n

Exposed Online<\/p>\n

<\/p>\n

\n168<\/h3>\n

Countries<\/p>\n

<\/p>\n

\n75%<\/h3>\n

in Commercial Networks<\/p>\n

\n<\/figure>\n

Explore DrayBreak Research with Vedere Labs <\/h2>\n

Join Elisa Costante, Vice President of Research, for a riveting discussion on the specific details of our findings and our responsible vulnerability disclosure. This webinar will discuss possible attack scenarios and their impact \u2013 including opportunities for remote network control, ransomware, DDoS, and other highly disruptive and costly cybersecurity events. Given the latest news of the FBI taking down a botnet using DrayTek products, you aren\u2019t going to want to miss this one.<\/p>\n

Watch Now<\/a><\/p>\n

Where Are the Most Exposed Routers?<\/h2>\n

<\/p>\n

Read Blog<\/a><\/p>\n

<\/p>\n

Access The Report<\/a><\/p>\n

<\/p>\n

\n

Attack Scenarios<\/h3>\n<\/h2>\n

See the potential attack scenarios involving a vulnerable device configured to expose the Web UI over the WAN (internet). The impact? A rootkit that survives reboots and firmware updates. Network traffic is intercepted to harvest credentials and sensitive data. The ability to pivot to devices on the local network for ransomware attacks or DoS.<\/p>\n

Watch the Webinar<\/a><\/p>\n

Status of Routers: End of Life \/ End of Sale<\/h2>\n

Of the 704,000+ routers exposed to the internet, the majority (63%) are either End of Life (EoL) or End of Sale (EoS). What\u2019s more, 24 device models are affected by the new vulnerabilities, including 11 that are EoL. This is troublesome given many manufacturers stop security patches and updates at this stage of the product lifecycle.<\/p>\n

Support Status for Exposed Routers<\/h4>\n

Intended Use of Exposed Routers<\/h4>\n

<\/a><\/p>\n

Dive Into the Research <\/h2>\n

Stay on top of this vendor\u2019s vulnerabilities, so you can know where to focus your cybersecurity and defenses. Get all the data and analysis including:
\n\u00a0\n