Search criteria
2 vulnerabilities found for Vigor2865 LTE Series by DrayTek Corporation
CVE-2025-10547 (GCVE-0-2025-10547)
Vulnerability from cvelistv5 – Published: 2025-10-03 11:35 – Updated: 2025-11-04 22:06
VLAI?
Summary
An uninitialized variable in the HTTP CGI request arguments processing component of Vigor Routers running DrayOS may allow an attacker the ability to perform RCE on the appliance through memory corruption.
Severity ?
9.8 (Critical)
CWE
- CWE-456 - Missing Initialization of a Variable
Assigner
References
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| DrayTek Corporation | Vigor1000B |
Affected:
0 , < 4.4.5.1
(custom)
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2025-10547",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-10-03T14:33:21.692268Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-10-16T18:32:38.126Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2025-11-04T22:06:30.559Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "https://www.kb.cert.org/vuls/id/294418"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Vigor1000B",
"vendor": "DrayTek Corporation",
"versions": [
{
"lessThan": "4.4.5.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Vigor2962",
"vendor": "DrayTek Corporation",
"versions": [
{
"lessThan": "4.4.5.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Vigor3910",
"vendor": "DrayTek Corporation",
"versions": [
{
"lessThan": "4.4.3.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Vigor3912",
"vendor": "DrayTek Corporation",
"versions": [
{
"lessThan": "4.4.5.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Vigor2135",
"vendor": "DrayTek Corporation",
"versions": [
{
"lessThan": "4.5.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Vigor2763",
"vendor": "DrayTek Corporation",
"versions": [
{
"lessThan": "4.5.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Vigor2765",
"vendor": "DrayTek Corporation",
"versions": [
{
"lessThan": "4.5.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Vigor2766",
"vendor": "DrayTek Corporation",
"versions": [
{
"lessThan": "4.5.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Vigor2865",
"vendor": "DrayTek Corporation",
"versions": [
{
"lessThan": "4.5.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Vigor2865 LTE Series",
"vendor": "DrayTek Corporation",
"versions": [
{
"lessThan": "4.5.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Vigor2865L-5G Series",
"vendor": "DrayTek Corporation",
"versions": [
{
"lessThan": "4.5.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Vigor2866",
"vendor": "DrayTek Corporation",
"versions": [
{
"lessThan": "4.5.1",
"status": "affected",
"version": "1.0",
"versionType": "custom"
}
]
},
{
"product": "Vigor2866 LTE",
"vendor": "DrayTek Corporation",
"versions": [
{
"lessThan": "4.5.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Vigor2927",
"vendor": "DrayTek Corporation",
"versions": [
{
"lessThan": "4.5.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Vigor 2927 LTE",
"vendor": "DrayTek Corporation",
"versions": [
{
"lessThan": "4.5.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Vigor2927L-5G",
"vendor": "DrayTek Corporation",
"versions": [
{
"lessThan": "4.5.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Vigor2915",
"vendor": "DrayTek Corporation",
"versions": [
{
"lessThan": "4.4.6.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Vigor2862",
"vendor": "DrayTek Corporation",
"versions": [
{
"lessThan": "3.9.9.12",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Vigor2862 LTE",
"vendor": "DrayTek Corporation",
"versions": [
{
"lessThan": "3.9.9.12",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Vigor2926",
"vendor": "DrayTek Corporation",
"versions": [
{
"lessThan": "3.9.9.12",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An uninitialized variable in the HTTP CGI request arguments processing component of Vigor Routers running DrayOS may allow an attacker the ability to perform RCE on the appliance through memory corruption."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-456: Missing Initialization of a Variable",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-10-20T15:58:45.010Z",
"orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
"shortName": "certcc"
},
"references": [
{
"url": "https://www.draytek.com/about/security-advisory/use-of-uninitialized-variable-vulnerabilities/"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "CVE-2025-10547",
"x_generator": {
"engine": "VINCE 3.0.26",
"env": "prod",
"origin": "https://cveawg.mitre.org/api/cve/CVE-2025-10547"
}
}
},
"cveMetadata": {
"assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
"assignerShortName": "certcc",
"cveId": "CVE-2025-10547",
"datePublished": "2025-10-03T11:35:43.752Z",
"dateReserved": "2025-09-16T11:35:24.694Z",
"dateUpdated": "2025-11-04T22:06:30.559Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-10547 (GCVE-0-2025-10547)
Vulnerability from nvd – Published: 2025-10-03 11:35 – Updated: 2025-11-04 22:06
VLAI?
Summary
An uninitialized variable in the HTTP CGI request arguments processing component of Vigor Routers running DrayOS may allow an attacker the ability to perform RCE on the appliance through memory corruption.
Severity ?
9.8 (Critical)
CWE
- CWE-456 - Missing Initialization of a Variable
Assigner
References
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| DrayTek Corporation | Vigor1000B |
Affected:
0 , < 4.4.5.1
(custom)
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2025-10547",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-10-03T14:33:21.692268Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-10-16T18:32:38.126Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2025-11-04T22:06:30.559Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "https://www.kb.cert.org/vuls/id/294418"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Vigor1000B",
"vendor": "DrayTek Corporation",
"versions": [
{
"lessThan": "4.4.5.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Vigor2962",
"vendor": "DrayTek Corporation",
"versions": [
{
"lessThan": "4.4.5.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Vigor3910",
"vendor": "DrayTek Corporation",
"versions": [
{
"lessThan": "4.4.3.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Vigor3912",
"vendor": "DrayTek Corporation",
"versions": [
{
"lessThan": "4.4.5.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Vigor2135",
"vendor": "DrayTek Corporation",
"versions": [
{
"lessThan": "4.5.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Vigor2763",
"vendor": "DrayTek Corporation",
"versions": [
{
"lessThan": "4.5.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Vigor2765",
"vendor": "DrayTek Corporation",
"versions": [
{
"lessThan": "4.5.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Vigor2766",
"vendor": "DrayTek Corporation",
"versions": [
{
"lessThan": "4.5.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Vigor2865",
"vendor": "DrayTek Corporation",
"versions": [
{
"lessThan": "4.5.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Vigor2865 LTE Series",
"vendor": "DrayTek Corporation",
"versions": [
{
"lessThan": "4.5.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Vigor2865L-5G Series",
"vendor": "DrayTek Corporation",
"versions": [
{
"lessThan": "4.5.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Vigor2866",
"vendor": "DrayTek Corporation",
"versions": [
{
"lessThan": "4.5.1",
"status": "affected",
"version": "1.0",
"versionType": "custom"
}
]
},
{
"product": "Vigor2866 LTE",
"vendor": "DrayTek Corporation",
"versions": [
{
"lessThan": "4.5.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Vigor2927",
"vendor": "DrayTek Corporation",
"versions": [
{
"lessThan": "4.5.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Vigor 2927 LTE",
"vendor": "DrayTek Corporation",
"versions": [
{
"lessThan": "4.5.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Vigor2927L-5G",
"vendor": "DrayTek Corporation",
"versions": [
{
"lessThan": "4.5.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Vigor2915",
"vendor": "DrayTek Corporation",
"versions": [
{
"lessThan": "4.4.6.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Vigor2862",
"vendor": "DrayTek Corporation",
"versions": [
{
"lessThan": "3.9.9.12",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Vigor2862 LTE",
"vendor": "DrayTek Corporation",
"versions": [
{
"lessThan": "3.9.9.12",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Vigor2926",
"vendor": "DrayTek Corporation",
"versions": [
{
"lessThan": "3.9.9.12",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An uninitialized variable in the HTTP CGI request arguments processing component of Vigor Routers running DrayOS may allow an attacker the ability to perform RCE on the appliance through memory corruption."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-456: Missing Initialization of a Variable",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-10-20T15:58:45.010Z",
"orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
"shortName": "certcc"
},
"references": [
{
"url": "https://www.draytek.com/about/security-advisory/use-of-uninitialized-variable-vulnerabilities/"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "CVE-2025-10547",
"x_generator": {
"engine": "VINCE 3.0.26",
"env": "prod",
"origin": "https://cveawg.mitre.org/api/cve/CVE-2025-10547"
}
}
},
"cveMetadata": {
"assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
"assignerShortName": "certcc",
"cveId": "CVE-2025-10547",
"datePublished": "2025-10-03T11:35:43.752Z",
"dateReserved": "2025-09-16T11:35:24.694Z",
"dateUpdated": "2025-11-04T22:06:30.559Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}