CVE-2025-44643 affects specific versions of Draytek products AP903 (v1.4.18), AP912C (v1.4.9), and AP918R (v1.4.9). The vulnerability arises from a hardcoded weak password set in the ripd.conf configuration file, which controls the routing daemon. An attacker with network access could exploit this insecure configuration to gain unauthorized control over the routing daemon, potentially allowing manipulation of network routes or interception of network traffic. The CVSS v3.1 base score is 8.6, indicating high severity with network attack vector, low attack complexity, no privileges or user interaction required, and impacts on confidentiality, integrity, and availability. There is no vendor advisory or patch information available, and no known exploits in the wild have been reported.

Exploitation of this vulnerability could allow an attacker with network access to gain unauthorized control over the routing daemon on affected Draytek devices. This could lead to unauthorized modification of network routes or interception of network traffic, impacting confidentiality, integrity, and availability of network communications. The CVSS score of 8.6 reflects a high impact due to these potential consequences.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the affected devices to trusted users only and monitor for unusual routing behavior. Avoid exposing these devices directly to untrusted networks. Follow vendor channels for updates regarding patches or configuration changes to mitigate the hardcoded password issue.