Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


saf

saf

221 posts

Master Geek
+1 received by user: 533

ID Verified
Trusted
Vetta Group
Subscriber

#319120 24-Mar-2025 10:53
Send private message

Just a heads up, ourselves and many other ISPs both in NZ and internationally have started seeing a couple of DrayTek CVE's being exploited over the last ~24 hours.

 

One of the symptoms of this is the internet connection bouncing up and down, due to the DrayTek encountering a buffer overflow from these exploits.

 

While I don't have all the detail, general rules apple:
If you're using a DrayTek router, please ensure it's up to date.
If you're using a DrayTek router and your connection is bouncing up and down hinting at being hit by the exploit, reset it, update it, and reconfigure.

 

More info:

 


https://www.draytek.com/about/security-advisory/buffer-overflow-vulnerabilities-(cve-2024-51138-cve-2024-51139)

 


https://www.draytek.com/about/security-advisory/denial-of-service,-information-disclosure,-and-code-execution-vulnerabilities

 

 





My views are as unique as a unicorn riding a unicycle. They do not reflect the opinions of my employer, my cat, or the sentient coffee machine in the break room.


Create new topic
drquack32
129 posts

Master Geek
+1 received by user: 9

ID Verified

  #3356876 24-Mar-2025 12:23
Send private message

Yeah the punishing thing is I checked this last week. It did not list the 2120s as a compromised model but have two of those that have flaked out. Last firmware is 2019 so only option is to replace





IT Guy, ex-FIFA Referee, Dad


Create new topic








Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.