Known vulnerabilities in Vigor2862

Vendor: DrayTek Corp.
Software: Vigor2862
Software CPE: cpe:2.3:h:draytek_corp:vigor2862:*:*:*:*:*:*:*:*
Website: https://www.draytek.co.uk
Total vulnerabilities: 9
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Vigor2862 Vigor2862 is affected by 9 known vulnerabilities: 1 critical, 7 high, 1 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU116451 - Use of Uninitialized Variable
CVE-2025-10547		 CWE-457 Critical
No
No
 3.9.9.12 04.10.2025 SB2025100409
#VU106357 - Unrestricted Upload of File with Dangerous Type
CVE-2024-41340		 CWE-434 High
No
No
 3.9.9.5 01.04.2025 SB2025040126
#VU106355 - NULL Pointer Dereference
CVE-2024-41338		 CWE-476 High
No
No
 3.9.9.5 01.04.2025 SB2025040126
#VU106354 - Unprotected Storage of Credentials
CVE-2024-41336		 CWE-256 Low
No
No
 3.9.9.5 01.04.2025 SB2025040126
#VU106353 - Observable discrepancy
CVE-2024-41335		 CWE-203 High
No
No
 3.9.9.5 01.04.2025 SB2025040126
#VU106352 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-41339		 CWE-94 High
No
No
 3.9.9.5 01.04.2025 SB2025040126
#VU106351 - Improper Certificate Validation
CVE-2024-41334		 CWE-295 High
No
No
 3.9.9.5 01.04.2025 SB2025040126
#VU106350 - Integer overflow
CVE-2024-51139		 CWE-190 High
No
No
 3.9.9.8 01.04.2025 SB2025040124
#VU106349 - Stack-based buffer overflow
CVE-2024-51138		 CWE-121 High
No
No
 3.9.9.8 01.04.2025 SB2025040124