Security Alert

CSRF Vulnerability

It has been reported that some web-enabled devices, including some DrayTek routers, have been compromised. The report shows that it may be possible for an attacker to intercept or create an administration session and change DNS and/or other settings on the router.
DrayTek has now released new firmware that addresses this security vulnerability. The firmware can be downloaded from:
To check if your router has been compromised, look at the DNS and DHCP settings on your router.   If you have a router supporting multiple LAN subnets, check the settings for each subnet.  Your DNS settings should be either blank, set to the correct DNS server addresses from your ISP or DNS server addresses of a server which you have set (e.g. Google
If you see a rogue DNS server setting of – it means that your router settings have been changed.  In this case you can correct the changes or restore the router configuration from the last good known backup configuration.
Updated firmware with the security fix listed below:

      • Vigor120, version
      • Vigor122, version
      • Vigor130, version
      • VigorNIC 132, version
      • Vigor2120 Series, version
      • Vigor2132, version
      • Vigor2133, version
      • Vigor2760D, version
      • Vigor2762, version
      • Vigor2832, version
      • Vigor2860, version 3.8.8
      • Vigor2862, version
      • Vigor2862B, version
      • Vigor2912, version
      • Vigor2925, version
      • Vigor2926, version
      • Vigor2952, version
      • Vigor3220, version
      • VigorBX2000, version
      • VigorIPPBX2820, version
      • VigorIPPBX3510, version
      • Vigor2830nv2, version
      • Vigor2820, version
      • Vigor2710, version
      • Vigro2110, version
      • Vigro2830sb, version
      • Vigor2850, version
      • Vigor2920, version

Click here to download latest firmware.

Latest Video

How to activate and use DrayDDNS Service

This video introduces the DrayDDNS service. DrayDDNS can be used when your ISP gives you a dynamic IP address and it allows you to connect to the router remotely by using a domain name. The configuration steps in a DrayTek Vigor router are described to assist you to in setting up your own DrayDDNS account.


How to Find the Best Wi-Fi Channel by Using Vigor AP or your Mobile Phone

This video shows how to find the best Wi-Fi channel by using a Vigor Access Point (AP) or your mobile phone. Since Wi-Fi performance is related to the channel utilisation, the diagnostic steps shown in this video will help to find the least congested channel to use.


New Application Notes

How to configure firewall filter rules to allow VPN if default rule is set to block all traffic.

This application note shows how to configure the firewall in Vigor routers to allow required traffic over a VPN tunnel when the default firewall rule is set to block all traffic.

[tw_button icon=”” link=”” size=”medium” rounded=”false” style=”flat” hover=”default” color=”#000000″ target=”_blank”]Read more[/tw_button]


Updated Utility

Smart VPN Client V4.3.4

New feature

  • Allow the user to run SmartVPN Client and establish the VPN tunnel using Windows User Level Account. Note that the SmartVPN Client should be installed using Windows Admin Level Account first.

Click here to download