Urgent Draytek Vulnerability (CVE-2025-10547)

Date Posted: 03.10.2025
2 min read
Written by: Exa Networks

A vulnerability within DrayOS routers has been identified.

This could allow an attacker with access to the local network to exploit the vulnerability. If you are a Draytek user or manage a Draytek device, it is crucial to be aware of the potential risks this could pose and take action to safeguard your network

Is your device affected?

This vulnerability impacts any DrayOS routers that have not received recent security patches. If you are unsure whether your device is affected, it’s vital to check if you have the latest firmware updates installed.

The good news is for any customers utilising our Router Management service, your Draytek device will have already been patched beyond the vulnerability in question. These devices, which are part of a special security programme, have received regular firmware updates that ensure they remain secure from this and other potential threats. As such, customers with our Router Management service should not experience the same connectivity issues from this vulnerability and can rest assured that their devices are protected.

What should you do?

To ensure your device is secure and protected from this vulnerability, it is essential to upgrade your firmware to the latest release. By updating to the latest firmware, you can effectively patch the vulnerability and avoid potential disruptions or security risks.

If you’re unsure how to check for or install the latest firmware on your Draytek device, the Exa Customer Operations team is available to guide you through the process. They can assist in how to check your device’s current firmware version and help you install the updated firmware to secure your network.

Visit the Draytek support page or contact Exa Customer Operations for assistance in upgrading your device via helpdesk@exa.net.uk or 0345 145 1234.