There is talk of a new exploit on the 3900 an 2960 Routers and I note there is no update to the firmware since 1.5.1.4 in May 2022

https://www.bleepingcomputer.com/news/security/new-malware-infects-business-routers-for-data-theft-surveillance/

Does anyone one know if firmware 1.5.1.4 is vulnerable to this exploit

That's a good question.

Draytek?

The Draytek UK has no response???

Well you won't get a response from them here.

I can't see anything on their UK or TW websites but you could keep an eye on here:

https://www.draytek.com/about/security-advisory/

You could also raise a ticket with support. I've heard it doesn't affect the DrayOS products but that's hearsay at the moment.

Finally some detail from Draytek AU

https://www.draytek.com.au/security-advisory-new-video-and-firmware-for-draytek-products-13-mar-2023/


Still nothing from UK and TW