Skip to main content

CVE-2025-10547: Vigor routers face RCE risk via EasyVPN

This is the page you're already on — the Human View toggle above shows it in full.

A green key on the record, left, is one Decision Insights added. It doesn't exist on the company's site or in a wire feed. The same key labels its row on the right, so you can match them directly. More on how DI enriches a record.

The record

This is what the machine sees: the exact JSON-LD an agent receives for this listing.

WebSite
{
  "@context": "https://schema.org",
  "@id": "https://decisioninsights.ai/#website",
  "@type": "WebSite",
  "name": "Decision Insights",
  "potentialAction": {
    "@type": "SearchAction",
    "target": {
      "@type": "EntryPoint",
      "urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}\u0026submit=1"
    }
  },
  "publisher": {
    "@id": "https://decisioninsights.ai/#organization"
  },
  "url": "https://decisioninsights.ai"
}
Organization
{
  "@context": "https://schema.org",
  "@id": "https://decisioninsights.ai/#organization",
  "@type": "Organization",
  "contactPoint": {
    "@type": "ContactPoint",
    "contactType": "customer support",
    "email": "[email protected]"
  },
  "description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
  "logo": {
    "@type": "ImageObject",
    "url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
  },
  "name": "Decision Insights",
  "parentOrganization": {
    "@type": "Organization",
    "name": "Wiretap Labs",
    "sameAs": [
      "https://www.linkedin.com/company/wiretap-labs",
      "https://www.crunchbase.com/organization/wiretap-labs"
    ],
    "url": "https://wiretaplabs.com"
  },
  "publishingPrinciples": "https://decisioninsights.ai/standards/",
  "sameAs": [
    "https://www.linkedin.com/company/decisioninsights"
  ],
  "url": "https://decisioninsights.ai"
}
BreadcrumbList
{
  "@context": "https://schema.org",
  "@type": "BreadcrumbList",
  "itemListElement": [
    {
      "@type": "ListItem",
      "item": "https://decisioninsights.ai",
      "name": "Decision Insights",
      "position": 1
    },
    {
      "@type": "ListItem",
      "item": "https://decisioninsights.ai/records/",
      "name": "Records",
      "position": 2
    },
    {
      "@type": "ListItem",
      "item": "https://decisioninsights.ai/cve-2025-10547-vigor-routers-face-rce-risk-via-easyvpn/",
      "name": "CVE-2025-10547: Vigor routers face RCE risk via EasyVPN",
      "position": 3
    }
  ]
}
BlogPosting
{
  "@context": "https://schema.org",
  "@id": "https://decisioninsights.ai/cve-2025-10547-vigor-routers-face-rce-risk-via-easyvpn/#blogposting",
  "@type": "BlogPosting",
  "about": {
    "@type": "Organization",
    "name": "DrayTek"
  },
  "articleSection": [
    "Cybersecurity",
    "Data Center",
    "Network Operator"
  ],
  "audience": [
    {
      "@type": "Audience",
      "additionalType": "Persona",
      "audienceType": "Security Operations Leader"
    },
    {
      "@type": "Audience",
      "additionalType": "Adoption curve",
      "audienceType": "Late Majority"
    }
  ],
  "author": {
    "@id": "https://decisioninsights.ai/author/decision-insights-threat-desk/#person",
    "@type": "Person",
    "name": "Decision Insights Threat Desk",
    "url": "https://decisioninsights.ai/author/decision-insights-threat-desk/"
  },
  "dateModified": "2026-08-24T10:36:41-06:00",
  "datePublished": "2025-10-03T09:30:43-06:00",
  "description": "CVE-2025-10547 affects Vigor routers, exposing users to remote code execution risks via the EasyVPN and LAN interfaces.",
  "headline": "CVE-2025-10547: Vigor routers face RCE risk via EasyVPN",
  "isBasedOn": {
    "@type": "CreativeWork",
    "author": {
      "@type": "Person",
      "name": "Ayushi Kriplani"
    },
    "sourceOrganization": {
      "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
      "@type": "Organization",
      "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
      "name": "Department of Homeland Security"
    },
    "url": "https://kb.cert.org/vuls/id/294418"
  },
  "keywords": [
    "Common Vulnerabilities and Exposures",
    "Intrusion Detection System",
    "Local Area Network",
    "Router",
    "Virtual Private Network",
    "Vulnerabilities",
    "Wide Area Network"
  ],
  "mainEntityOfPage": {
    "@id": "https://decisioninsights.ai/cve-2025-10547-vigor-routers-face-rce-risk-via-easyvpn/",
    "@type": "WebPage",
    "sdDatePublished": "2026-08-24",
    "sdPublisher": {
      "@id": "https://decisioninsights.ai/#organization"
    }
  },
  "mentions": [
    {
      "@type": "SoftwareSourceCode",
      "name": "OpenVPN"
    },
    {
      "@type": "SoftwareSourceCode",
      "name": "WireGuard"
    }
  ],
  "publisher": {
    "@id": "https://decisioninsights.ai/#organization"
  }
}
Person
{
  "@context": "https://schema.org",
  "@id": "https://decisioninsights.ai/author/decision-insights-threat-desk/#person",
  "@type": "Person",
  "description": "CISA advisories, vendor security bulletins, and CVE disclosures, summarized into sourced briefs. Produced under our Standards \u0026 Methodology.",
  "name": "Decision Insights Threat Desk",
  "sameAs": [
    "https://www.linkedin.com/showcase/decisioninsights/"
  ],
  "url": "https://decisioninsights.ai/author/decision-insights-threat-desk/"
}
What we add

Audience targeting

A company states its own audience in marketing copy, if at all. This is Decision Insights' own classification of the content -- seniority, job function, buyer role, adoption curve, technology maturity and target industry -- not the publisher's self-reported audience.

Persona Security Operations Leader Adoption curve Late Majority

Subject determination

A syndication feed carries a story and every company it happens to name, with no way to tell which one the story is actually about. This is Decision Insights' own determination of this article's subject -- one company, resolved from the source feed's own assignment where one exists, our own analysis otherwise.

DrayTek

Entity resolution

A wire feed names a company as a bare string, mentioned once and never resolved to anything. This is every company and project Decision Insights identified in this article, each linked to its own record with a real address, not a name an agent has to match itself.

OpenVPN WireGuard

Primary source

Our own summary carries our own byline, same as anyone else's would. This is the original work it is based on -- the source URL, its author and its publisher -- so the claim can be checked against where it actually came from, not just taken on our word.

Source https://kb.cert.org/vuls/id/294418 Original author Ayushi Kriplani Source publisher Department of Homeland Security