Description
An uninitialized variable in the HTTP CGI request arguments processing component of Vigor Routers running DrayOS may allow an attacker the ability to perform RCE on the appliance through memory corruption.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| DrayTek | Vigor1000B | < 4.4.5.1 | 4.4.5.1 |
| DrayTek | Vigor2962 | < 4.4.5.1 | 4.4.5.1 |
| DrayTek | Vigor3910 | < 4.4.3.6 | 4.4.3.6 |
| DrayTek | Vigor3912 | < 4.4.5.1 | 4.4.5.1 |
| DrayTek | Vigor2135 | < 4.5.1 | 4.5.1 |
| DrayTek | Vigor2763 | < 4.5.1 | 4.5.1 |
| DrayTek | Vigor2765 | < 4.5.1 | 4.5.1 |
| DrayTek | Vigor2766 | < 4.5.1 | 4.5.1 |
| DrayTek | Vigor2865 | < 4.5.1 | 4.5.1 |
| DrayTek | Vigor2865 LTE Series | < 4.5.1 | 4.5.1 |
| DrayTek | Vigor2865L-5G Series | < 4.5.1 | 4.5.1 |
| DrayTek | Vigor2866 | 1.0 – < 4.5.1 | 4.5.1 |
| DrayTek | Vigor2866 LTE | < 4.5.1 | 4.5.1 |
| DrayTek | Vigor2927 | < 4.5.1 | 4.5.1 |
| DrayTek | Vigor 2927 LTE | < 4.5.1 | 4.5.1 |
| DrayTek | Vigor2927L-5G | < 4.5.1 | 4.5.1 |
| DrayTek | Vigor2915 | < 4.4.6.1 | 4.4.6.1 |
| DrayTek | Vigor2862 | < 3.9.9.12 | 3.9.9.12 |
| DrayTek | Vigor2862 LTE | < 3.9.9.12 | 3.9.9.12 |
| DrayTek | Vigor2926 | < 3.9.9.12 | 3.9.9.12 |
Advisories 1
- WID-SEC-2025-2206 DrayTek Vigor: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Oct 5, 2025