Known vulnerabilities in Vigor 1000B

Vendor: DrayTek Corp.
Software: Vigor 1000B
Software CPE: cpe:2.3:h:draytek_corp:vigor_1000b:*:*:*:*:*:*:*:*
Website: https://www.draytek.co.uk
Total vulnerabilities: 16
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Vigor 1000B Vigor 1000B is affected by 16 known vulnerabilities: 2 critical, 1 high, 3 medium, 10 low Critical High Medium Low

Vulnerabilities (16)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU116451 - Use of Uninitialized Variable
CVE-2025-10547		 CWE-457 Critical
No
No
 4.4.3.6 04.10.2025 SB2025100409
#VU97986 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-41585		 CWE-78 Medium
No
No
 4.3.2.8 03.10.2024 SB2024100306
#VU97985 - Credentials Management
CVE-2024-41589		 CWE-255 Medium
No
No
 4.3.2.8 03.10.2024 SB2024100306
#VU97983 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2024-41594		 CWE-338 Medium
No
No
 4.3.2.8 03.10.2024 SB2024100306
#VU97982 - Memory corruption
CVE-2024-41595		 CWE-119 Low
No
No
 4.3.2.8 03.10.2024 SB2024100306
#VU97981 - Memory corruption
CVE-2024-41586		 CWE-119 Low
No
No
 4.3.2.8 03.10.2024 SB2024100306
#VU97980 - Memory corruption
CVE-2024-41596		 CWE-119 Low
No
No
 4.3.2.8 03.10.2024 SB2024100306
#VU97978 - Memory corruption
CVE-2024-41593		 CWE-119 Low
No
No
 4.3.2.8 03.10.2024 SB2024100306
#VU97977 - Memory corruption
CVE-2024-41590		 CWE-119 Low
No
No
 4.3.2.8 03.10.2024 SB2024100306
#VU97976 - Memory corruption
CVE-2024-41588		 CWE-119 Low
No
No
 4.3.2.8 03.10.2024 SB2024100306
#VU97975 - Memory corruption
CVE-2024-41592		 CWE-119 Critical
No
No
 4.3.2.8 03.10.2024 SB2024100306
#VU97969 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-41584		 CWE-79 Low
No
No
 4.3.2.8 02.10.2024 SB2024100306
#VU97968 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-41591		 CWE-79 Low
No
No
 4.3.2.8 02.10.2024 SB2024100306
#VU97967 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-41587		 CWE-79 Low
No
No
 4.3.2.8 02.10.2024 SB2024100306
#VU97966 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-41583		 CWE-79 Low
No
No
 4.3.2.8 02.10.2024 SB2024100306
#VU66126 - Memory corruption
CVE-2022-32548		 CWE-119 High
No
No
 4.3.1.1 05.08.2022 SB2022080516