CVE-2025-10547

🗓️ 03 Oct 2025 11:35:43Reported by certccType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 37 Views

Uninitialized variable in HTTP CGI arguments on Vigor Routers DrayOS may allow remote execution.

Reporter	Title	Published	Views	Family All 11
bdu_fstec	The vulnerability of the HTTP CGI Request Handler component in DrayTek Vigor microprogramming software allows a hacker to trigger a service failure or execute arbitrary code.	27 Oct 202500:00	–	bdu_fstec
circl	CVE-2025-10547	2 Oct 202517:55	–	circl
cnnvd	DrayTek Vigor Routers 安全漏洞	3 Oct 202500:00	–	cnnvd
cvelist	CVE-2025-10547 CVE-2025-10547	3 Oct 202511:35	–	cvelist
euvd	EUVD-2025-32290	3 Oct 202520:07	–	euvd
nvd	CVE-2025-10547	3 Oct 202512:15	–	nvd
ptsecurity	PT-2025-40432	2 Oct 202500:00	–	ptsecurity
redhatcve	CVE-2025-10547	7 Oct 202517:35	–	redhatcve
thn	⚡ Weekly Recap: Oracle 0-Day, BitLocker Bypass, VMScape, WhatsApp Worm & More	6 Oct 202511:38	–	thn
cert	Vigor routers running DrayOS are vulnerable to RCE via EasyVPN and LAN web administration interface	3 Oct 202500:00	–	cert

[
  {
    "vendor": "DrayTek Corporation",
    "product": "Vigor1000B",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "4.4.5.1",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "DrayTek Corporation",
    "product": "Vigor2962",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "4.4.5.1",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "DrayTek Corporation",
    "product": "Vigor3910",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "4.4.3.6",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "DrayTek Corporation",
    "product": "Vigor3912",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "4.4.5.1",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "DrayTek Corporation",
    "product": "Vigor2135",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "4.5.1",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "DrayTek Corporation",
    "product": "Vigor2763",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "4.5.1",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "DrayTek Corporation",
    "product": "Vigor2765",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "4.5.1",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "DrayTek Corporation",
    "product": "Vigor2766",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "4.5.1",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "DrayTek Corporation",
    "product": "Vigor2865",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "4.5.1",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "DrayTek Corporation",
    "product": "Vigor2865 LTE Series",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "4.5.1",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "DrayTek Corporation",
    "product": "Vigor2865L-5G Series",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "4.5.1",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "DrayTek Corporation",
    "product": "Vigor2866",
    "versions": [
      {
        "status": "affected",
        "version": "1.0",
        "lessThan": "4.5.1",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "DrayTek Corporation",
    "product": "Vigor2866 LTE",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "4.5.1",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "DrayTek Corporation",
    "product": "Vigor2927",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "4.5.1",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "DrayTek Corporation",
    "product": "Vigor 2927 LTE",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "4.5.1",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "DrayTek Corporation",
    "product": "Vigor2927L-5G",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "4.5.1",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "DrayTek Corporation",
    "product": "Vigor2915",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "4.4.6.1",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "DrayTek Corporation",
    "product": "Vigor2862",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "3.9.9.12",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "DrayTek Corporation",
    "product": "Vigor2862 LTE",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "3.9.9.12",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "DrayTek Corporation",
    "product": "Vigor2926",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "3.9.9.12",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
draytek	www.draytek.com/about/security-advisory/use-of-uninitialized-variable-vulnerabilities/
kb	www.kb.cert.org/vuls/id/294418

17 Jun 2026 08:28Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.19.8

EPSS0.00574

SSVC