CVE-2025-10547: CVE-2025-10547
DrayTek Corporation · Vigor1000B
Vendor fix available · Affected: DrayTek Corporation Vigor1000B · Exploitation: unlikely (under 1%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 49% of scored CVEs
DescriptionCVE.org
An uninitialized variable in the HTTP CGI request arguments processing component of Vigor Routers running DrayOS may allow an attacker the ability to perform RCE on the appliance through memory corruption.
Affected products20
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- DrayTek Corporation · Vigor1000Bbefore 4.4.5.1
- DrayTek Corporation · Vigor2962before 4.4.5.1
- DrayTek Corporation · Vigor3910before 4.4.3.6
- DrayTek Corporation · Vigor3912before 4.4.5.1
- DrayTek Corporation · Vigor2135before 4.5.1
- DrayTek Corporation · Vigor2763before 4.5.1
- DrayTek Corporation · Vigor2765before 4.5.1
- DrayTek Corporation · Vigor2766before 4.5.1
- DrayTek Corporation · Vigor2865before 4.5.1
- DrayTek Corporation · Vigor2865 LTE Seriesbefore 4.5.1
- DrayTek Corporation · Vigor2865L-5G Seriesbefore 4.5.1
- DrayTek Corporation · Vigor2866from 1.0 before 4.5.1
- DrayTek Corporation · Vigor2866 LTEbefore 4.5.1
- DrayTek Corporation · Vigor2927before 4.5.1
- DrayTek Corporation · Vigor 2927 LTEbefore 4.5.1
- DrayTek Corporation · Vigor2927L-5Gbefore 4.5.1
- DrayTek Corporation · Vigor2915before 4.4.6.1
- DrayTek Corporation · Vigor2862before 3.9.9.12
- DrayTek Corporation · Vigor2862 LTEbefore 3.9.9.12
- DrayTek Corporation · Vigor2926before 3.9.9.12
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Unlikely (under 1%). EPSS under 1%, or no score yet.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- DrayTek Corporation
- Published
- October 2025
CoverageNo articles yet
No CyberSIXT article names CVE-2025-10547 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.