Back to overview

CVE-2025-10547

CRITICAL
9.8
CVSS 3.1
Description
An uninitialized variable in the HTTP CGI request arguments processing component of Vigor Routers running DrayOS may allow an attacker the ability to perform RCE on the appliance through memory corruption.

Metadata

CVE ID
CVE-2025-10547
State
PUBLISHED
Assigner
certcc
Reserved
2025-09-16 11:35 UTC
Published
2025-10-03 11:35 UTC
Last updated
2025-11-04 22:06 UTC
Vendor / Product
DrayTek Corporation / Vigor1000B
Sources
cve.org  ·  NVD

Severity & Metrics

9.8 CRITICAL CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
SSVC — CISA Coordinator
Exploitation
none
Automatable
no
Tech. Impact
total
Affected products (20)
VendorProductPlatformVersions
DrayTek Corporation Vigor 2927 LTE — 0 < 4.5.1
DrayTek Corporation Vigor1000B — 0 < 4.4.5.1
DrayTek Corporation Vigor2135 — 0 < 4.5.1
DrayTek Corporation Vigor2763 — 0 < 4.5.1
DrayTek Corporation Vigor2765 — 0 < 4.5.1
DrayTek Corporation Vigor2766 — 0 < 4.5.1
DrayTek Corporation Vigor2862 — 0 < 3.9.9.12
DrayTek Corporation Vigor2862 LTE — 0 < 3.9.9.12
DrayTek Corporation Vigor2865 — 0 < 4.5.1
DrayTek Corporation Vigor2865 LTE Series — 0 < 4.5.1
DrayTek Corporation Vigor2865L-5G Series — 0 < 4.5.1
DrayTek Corporation Vigor2866 — 1.0 < 4.5.1
DrayTek Corporation Vigor2866 LTE — 0 < 4.5.1
DrayTek Corporation Vigor2915 — 0 < 4.4.6.1
DrayTek Corporation Vigor2926 — 0 < 3.9.9.12
DrayTek Corporation Vigor2927 — 0 < 4.5.1
DrayTek Corporation Vigor2927L-5G — 0 < 4.5.1
DrayTek Corporation Vigor2962 — 0 < 4.4.5.1
DrayTek Corporation Vigor3910 — 0 < 4.4.3.6
DrayTek Corporation Vigor3912 — 0 < 4.4.5.1
Weakness (CWE)
CWESourceDescription
— cna CWE-456: Missing Initialization of a Variable
CVSS scores (1)
ScoreSeverityVersionSourceVector
9.8 CRITICAL 3.1 adp CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References (1)
Back to overview