Description

Certain Draytek products are affected by Insecure Configuration. This affects AP903 v1.4.18 and AP912C v1.4.9 and AP918R v1.4.9. The setting of the password property in the ripd.conf configuration file sets a hardcoded weak password, posing a security risk. An attacker with network access could exploit this to gain unauthorized control over the routing daemon, potentially altering network routes or intercepting traffic.

INFO

Published Date :

2025-08-04T00:00:00.000Z

Last Modified :

2025-08-04T16:05:25.238Z

Source :

mitre
AFFECTED PRODUCTS

The following products are affected by CVE-2025-44643 vulnerability.

Vendors Products
Draytek
  • Ap903
  • Ap912c
  • Ap918r
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-44643.

URL Resource
http://draytek.com cve-icon cve-icon
https://www.notion.so/Misconfiguration-in-Draytek-AP903-23a54a1113e780aca7f2d21dbdab9db8 cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact