CVE Feed

    Dashboard / CVE / CVE-2025-65288

    CVE-2025-65288

    A buffer overflow in the Mercury MR816v2 (081C3114 4.8.7 Build 110427 Rel 36550n) occurs when the device accepts and stores excessively long hostnames from LAN hosts without proper length validation. The affected code performs unchecked copies/concatenations into fixed-size buffers. A crafted long hostname can overflow the buffer, cause a crash (DoS) and potentially enabling remote code execution.

    Published:Dec 9, 2025
    Last Modified:Dec 12, 2025
    EPS:Dec 9, 2025
    EPSS Score:0.00045
    CVSS Score:6.5

    Affected Products

    Vendor
    Mercury
    Product
    Mr816v2
    Vendor
    Mercurycom
    Product
    Mr816
    Vendor
    Mercurycom
    Product
    Mr816 Firmware

    Exploits

    https://damiri.fr/en/cve/CVE-2025-65288

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High