RCE Flaw CVE-2025-10547 in DrayTek Vigor Routers Allows Unauthenticated Root Access

A newly disclosed vulnerability in DrayTek’s Vigor routers, tracked as CVE-2025-10547, could allow remote attackers to execute arbitrary code and gain full control of affected devices. The flaw, rated CVSS 8.8 (High), affects multiple Vigor router models and can be exploited through either the LAN web interface or EasyVPN, according to CERT/CC.

According to CERT/CC, a remote, unauthenticated attacker can exploit this by accessing the LAN interface—or potentially the WAN interface if EasyVPN is enabled or remote administration over the internet is activated. In practical terms, attackers can manipulate the router’s memory by sending specially crafted HTTP requests, potentially leading to root access and code execution.

DrayTek’s Security Team has released patches for all affected models, with firmware updates now available for dozens of Vigor router models, including the Vigor1000B, 2962, 3910, 3912, 2135, 2763, 2765, 2865, 2866, 2927, and 2915, among others; newer models are fixed in firmware version 4.5.1 or later.