Draytek

Draytek manufactures a widely deployed line of business-grade networking appliances and routers, particularly its Vigor series, which are prominent fixtures in small-to-medium enterprise and branch-office environments globally. Vulnerabilities affecting the vendor skew toward serious outcomes, with an elevated share reaching critical severity, driven by the internet-facing and management-accessible nature of these devices. The exposure recurs across the Vigor product line through firmware-level weakness classes including buffer overflows, OS and command injection, cross-site scripting, and out-of-bounds writes, reflecting the memory-safety and input-handling challenges inherent to embedded networking appliances. Defenders should prioritize inventory and patching of exposed Vigor instances, as these devices often sit at network perimeters with limited operational constraints on update cycles. Current exploitation activity and exposure counts are shown alongside this summary.