Back to Database
Status published
Unknown
CVE-2025-10547
CVE-2025-10547
Vulnerability Description
An uninitialized variable in the HTTP CGI request arguments processing component of Vigor Routers running DrayOS may allow an attacker the ability to perform RCE on the appliance through memory corruption.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-10547
Credits & Attribution
No credits recorded in the NVD database.
Affected Vendor
DrayTek Corporation
View all reports →Affected Software
Vigor1000B, Vigor2962, Vigor3910, Vigor3912, Vigor2135, Vigor2763, Vigor2765, Vigor2766, Vigor2865, Vigor2865 LTE Series, Vigor2865L-5G Series, Vigor2866, Vigor2866 LTE, Vigor2927, Vigor 2927 LTE, Vigor2927L-5G, Vigor2915, Vigor2862, Vigor2862 LTE, Vigor2926
Vulnerable Versions:
0, 1.0
Timeline
Official Publish:
October 3rd, 2025
Last Modified:
November 4th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.