Not solely Draytek related, but just a heads up in case anyone might be affected:

http://www.pcworld.com/article/2861713/dangerous-misfortune-cookie-flaw-discovered-in-12-million-home-routers.html

More information here: http://www.checkpoint.com/blog/fortune-cookie-hole-internet-gateway/

A list of those tested so far and suspected to be vulnerable is here: http://mis.fortunecook.ie/misfortune-cookie-suspected-vulnerable.pdf

I notice there aren't any Draytek models on the list, so could someone confirm that Draytek do not use RomPager in any of their models - SOHO or Business - and they are not vulnerable to this particular attack?

DrayTek do not use the vulnerable code and have no exposure to misfortune cookie.

http://www.draytek.co.uk/support/guides/kb-security-advisory-misfortune-cookie-vulnerability

admin wrote: DrayTek do not use the vulnerable code and have no exposure to misfortune cookie.

Thanks for this - I was hoping that would be the case