CVE-2025-44643 | BDVDB-2026-288380 Detail

Description#

Certain Draytek products are affected by Insecure Configuration. This affects AP903 v1.4.18 and AP912C v1.4.9 and AP918R v1.4.9. The setting of the password property in the ripd.conf configuration file sets a hardcoded weak password, posing a security risk. An attacker with network access could exploit this to gain unauthorized control over the routing daemon, potentially altering network routes or intercepting traffic.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12025-08-04Record published in the CVE List.
2. Version 22026-07-05Most recent update recorded in the CVE List.