DrayTek Weekly Update 16 September 2025

DrayTek Weekly Update 16 September 2025

Upcoming Webinar

Duration: 30 minutes

 

Tune into our next YouTube Premiere webinar:
Security Features in DrayOS 5 Routers Part 2

This webinar is the second part of our two-part series examining firewall and security features in DrayTek DrayOS 5 routers, with a focus on the Vigor2136 router. However, the information presented will also apply to other DrayOS 5 routers, such as the VigorC510 series.

Topics covered in this webinar are:
          -  Overview of What is Denial of Service (DoS)
          -  Defense Setup 
          -  MAC Filtering Profile
          -  IPv6 Address Security

Stay tuned for an extra five minutes, and we will be on hand to answer any questions.


Then click on “Notify me” to receive a reminder when this event is scheduled to start (the “Notify me” button will come up when you sign in on YouTube).

We hope to see you there!

 

Latest Knowledge Base Article

This article discusses Port knocking, a technology that can add an extra layer of protection to the internal servers. Its basic idea is that only open ports are at risk of being attacked, so it allows all ports to be closed at the beginning. It includes a short video.

Click here to view this article.

 

Latest Firmware

Improvements

          -  Improve Web GUI Security
          -  Add SNMP OID for WAN uptime
          -  Comply with EN 18031 cybersecurity requirements    

    -  Improve the Wi-Fi Driver Security (CVE-2025-20681~20684, CVE-2025-20688~20692)
          -  Add an option to enable/disable the force password change when using the ".def" file       

          -  Fixed: Router rebooted when ACS provisioned it with an XML file that included specific VPN settings

          -  Fixed: An unnecessary object menu appeared in the Objects Settings
          -  Fixed: Router reboot issues related to WCF, VoIP/KMC56 buffer leakage, TR-069, and long URL

Click here to download the firmware.

 

Improvements

·            -  Improve Web GUI Security

    -  Add SNMP OID for WAN uptime
    -  Comply with EN 18031 cybersecurity requirements    

    -  Improve the Wi-Fi Driver Security (CVE-2025-20681~20684, CVE-2025-20688~20692)
    -  Add an option to enable/disable the force password change when using the ".def" file       

    -  Fixed: Router rebooted when ACS provisioned it with an XML file that included specific VPN settings

    -  Fixed: An unnecessary object menu appeared in the Objects Settings
    -  Fixed: Router reboot issues related to WCF, VoIP/KMC56 buffer leakage, TR-069, and long URL·

Click here to download the firmware.

 

Improvements

·            -  Improve Web GUI Security

    -  Add SNMP OID for WAN uptime
    -  Comply with EN 18031 cybersecurity requirements    

    -  Improve the Wi-Fi Driver Security (CVE-2025-20681~20684, CVE-2025-20688~20692)
    -  Add an option to enable/disable the force password change when using the ".def" file       

    -  Fixed: Router rebooted when ACS provisioned it with an XML file that included specific VPN settings

    -  Fixed: An unnecessary object menu appeared in the Objects Settings

         -  Fixed: Router reboot issues related to WCF, VoIP/KMC56 buffer leakage, TR-069, and long URL·  

·    Click here to download the firmware.

 

Improvements

·               -  Improved Web GUI Security    
           - Comply with EN 18031 cybersecurity requirements
          -  Improve the Wi-Fi Driver Security (CVE-2025-20681~20684 CVE-2025-20688~20692).

         -  Add an option to enable/disable the force password change when using the ".def" file. 

          -  Fixed: LTE PPP mode did not work with EM060k-EA.

          -  Fixed: Router rebooted when provisioned by ACS with an XML file that included specific VPN settings.

Click here to download the firmware.

 

Improvements

·                  -  Improved Web GUI Security    

     - Comply with EN 18031 cybersecurity requirements
     -  Improve the Wi-Fi Driver Security (CVE-2025-20681~20684 CVE-2025-20688~20692).

     -  Add an option to enable/disable the force password change when using the ".def" file. 

      -  Fixed: LTE PPP mode did not work with EM060k-EA.

      -  Fixed: Router rebooted when provisioned by ACS with an XML file that included specific VPN settings.

    

Click here to download the firmware.

 

Improvements  

I          -  Improved Web GUI Security    

     - Comply with EN 18031 cybersecurity requirements

     -  Improve the Wi-Fi Driver Security (CVE-2025-20681~20684 CVE-2025-20688~20692).

     -  Fixed: An unnecessary object menu appeared in the Objects Settings

     -  Fixed: Auto APN did not match the pre-configured APN profile list

     - Fixed: Port Redirection over VPN to a host on the remote network did not work

Click here to download the firmware.

 

 

 

 

 

Calendar Events from DrayTek HQ

DrayTek HQ often sends notifications of system updates or outages, security notifications, and firmware releases.

 

Click here for the latest news from DrayTek HQ.

 


To subscribe to our regular news updates, click “Subscribe” on this page or log into your i-helpdesk account and enable the “Subscribe” option.



    • Related Articles

    • Weekly Update 4 September 2019

      Upcoming Webinar Free Webinar – DrayTek Wi-Fi Solutions Tuesday 10th September 2019, 10:00 am Duration: 30 minutes You are invited to attend our next webinar DrayTek Wi-Fi Solutions. In this webinar we look at the latest developments in DrayTek Wi-Fi ...
    • DrayTek Weekly Update 30 September 2025

      Latest Videos DrayTek VigorAP 805 Access Point Overview This video provides an overview of the DrayTek VigorAP 805 Access Point. It is a Dual-Band 802.11ax (AX3000) Access Point with Mesh Wi-Fi, featuring 1 x GbE LAN port, 1 x 2.5GbE LAN port, and a ...
    • DrayTek Weekly Update 10 September 2025

      Latest Videos How to create a basic IPsec VPN using PSK on a Vigor2136ax with the SmartVPN client The new DrayTek DrayOS 5 routers have removed SSL, L2TP and PPTP encryptions from their VPN offering. However, we now have IPsec, WireGuard and OpenVPN ...
    • Weekly Update 12 September 2023

      Upcoming Webinar Free Webinar – DrayTek Router Troubleshooting Tips Tuesday 19th September 2023, 12:00 noon AEST Duration: 30 minutes Tune into our next YouTube Premiere webinar: DrayTek Router Troubleshooting Tips As part of maintaining your ...
    • Weekly Update 6 September 2022

      Upcoming Webinar Free Webinar – DrayTek VigorACS 3 - Auto VPN and VPN monitoring Tuesday 13th September 2022, 12:00 noon AEST Duration: 30 minutes   Tune into our next YouTube Premiere webinar: DrayTek VigorACS 3 - Auto VPN and VPN monitoring.   This ...