CVE-2025-10547
Critical
Description
An uninitialized variable in the HTTP CGI request arguments processing component of Vigor Routers running DrayOS may allow an attacker the ability to perform RCE on the appliance through memory corruption.
SeverityCritical
CVSS9.8
Exploit probability—
ProductVigor 2927 LTE
PublishedOct 3, 2025
First seenOct 3, 2025
Weakness typeCWE-456CWE-456
How to fix
Update
- DrayTek Corporation Vigor 2927 LTE4.5.1 or later
- DrayTek Corporation Vigor1000B4.4.5.1 or later
- DrayTek Corporation Vigor29624.4.5.1 or later
- DrayTek Corporation Vigor39104.4.3.6 or later
- DrayTek Corporation Vigor39124.4.5.1 or later
- DrayTek Corporation Vigor21354.5.1 or later
- DrayTek Corporation Vigor27634.5.1 or later
- DrayTek Corporation Vigor27654.5.1 or later
- DrayTek Corporation Vigor27664.5.1 or later
- DrayTek Corporation Vigor28654.5.1 or later
- DrayTek Corporation Vigor2865 LTE Series4.5.1 or later
- DrayTek Corporation Vigor2865L-5G Series4.5.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| DrayTek Corporation Vigor 2927 LTE | v < 4.5.1 | 4.5.1 |
| DrayTek Corporation Vigor1000B | v < 4.4.5.1 | 4.4.5.1 |
| DrayTek Corporation Vigor2962 | v < 4.4.5.1 | 4.4.5.1 |
| DrayTek Corporation Vigor3910 | v < 4.4.3.6 | 4.4.3.6 |
| DrayTek Corporation Vigor3912 | v < 4.4.5.1 | 4.4.5.1 |
| DrayTek Corporation Vigor2135 | v < 4.5.1 | 4.5.1 |
| DrayTek Corporation Vigor2763 | v < 4.5.1 | 4.5.1 |
| DrayTek Corporation Vigor2765 | v < 4.5.1 | 4.5.1 |
| DrayTek Corporation Vigor2766 | v < 4.5.1 | 4.5.1 |
| DrayTek Corporation Vigor2865 | v < 4.5.1 | 4.5.1 |
| DrayTek Corporation Vigor2865 LTE Series | v < 4.5.1 | 4.5.1 |
| DrayTek Corporation Vigor2865L-5G Series | v < 4.5.1 | 4.5.1 |
| DrayTek Corporation Vigor2866 | 1.0 ≤ v < 4.5.1 | 4.5.1 |
| DrayTek Corporation Vigor2866 LTE | v < 4.5.1 | 4.5.1 |
| DrayTek Corporation Vigor2927 | v < 4.5.1 | 4.5.1 |
| DrayTek Corporation Vigor2927L-5G | v < 4.5.1 | 4.5.1 |
| DrayTek Corporation Vigor2915 | v < 4.4.6.1 | 4.4.6.1 |
| DrayTek Corporation Vigor2862 | v < 3.9.9.12 | 3.9.9.12 |
| DrayTek Corporation Vigor2862 LTE | v < 3.9.9.12 | 3.9.9.12 |
| DrayTek Corporation Vigor2926 | v < 3.9.9.12 | 3.9.9.12 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.