CVE-2025-10547: Critical severity Vigor Routers vulnerability
Published Oct 3, 2025
·Updated
An uninitialized variable in the HTTP CGI request arguments processing component of Vigor Routers running DrayOS may allow an attacker the ability to perform RCE on the appliance through memory corruption.
Affected Software
1 affected component
Vigor Routers
Event History
Oct 2, 2025
News Published
via BleepingComputer·05:37 PM
News Published
via BleepingComputer·05:38 PM
Oct 3, 2025
CVE Published
via MITRE·11:35 AM
Data Sourced
via MITRE·11:35 AM
DescriptionWeakness
Data Sourced
via NVD·12:15 PM
DescriptionSeverity
Aug 6, 57762
Event
via NVD·01:43 AM
Frequently Asked Questions
1
What is the severity of CVE-2025-10547?
CVE-2025-10547 has a critical severity level due to its potential for remote code execution.
2
Who is affected by CVE-2025-10547?
CVE-2025-10547 affects Vigor Routers running DrayOS.
3
How do I fix CVE-2025-10547?
To mitigate CVE-2025-10547, update your Vigor Router to the latest firmware version provided by the manufacturer.
4
What type of vulnerability is CVE-2025-10547?
CVE-2025-10547 is an uninitialized variable vulnerability leading to potential memory corruption and remote code execution.
5
What could an attacker do with CVE-2025-10547?
An attacker could exploit CVE-2025-10547 to execute arbitrary code on the affected Vigor Router.