Mercusys

mercusys

7 CVEs • 6 products

Products (6)

Click to collapse

Toggle

Mercury X18g Firmware

mercury_x18g_firmware

Mercury D196g Firmware

mercury_d196g_firmware

Mw305r Firmware

mw305r_firmware

CVEs (7)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-56463 1Mercusys 1Mw305r Firmware Oct 7, 2025 Sep 26, 2025 N/A· v4 6.8 MEDIUM· v3 N/A· v2 Mercusys MW305R 3.30 and below is has a Transport Layer Security (TLS) certificate private key disclosure.
CVE-2022-26988 3Fastcom MercusysTp Link 6Fac1900r Firmware Mercury D196g FirmwareTl Wdr5660 Firmware+3 more Nov 21, 2024 May 10, 2022 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 TP-Link TL-WDR7660 2.0.30, Mercury D196G 20200109_2.0.4, and Fast FAC1900R 20190827_2.0.2 routers have a stack overflow issue in `MntAte` function. Local users could get remote code execution.
CVE-2022-26987 3Fastcom MercusysTp Link 6Fac1900r Firmware Mercury D196g FirmwareTl Wdr5660 Firmware+3 more Nov 21, 2024 May 10, 2022 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 TP-Link TL-WDR7660 2.0.30, Mercury D196G 20200109_2.0.4, and Fast FAC1900R 20190827_2.0.2 routers have a stack overflow issue in `MmtAtePrase` function. Local users could get remote code execution.
CVE-2021-25811 1Mercusys 1Mercury X18g Firmware Nov 21, 2024 Apr 29, 2021 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 MERCUSYS Mercury X18G 1.0.5 devices allow Denial of service via a crafted value to the POST listen_http_lan parameter. Upon subsequent device restarts after this vulnerability is exploted the device will not be able to a...Show more MERCUSYS Mercury X18G 1.0.5 devices allow Denial of service via a crafted value to the POST listen_http_lan parameter. Upon subsequent device restarts after this vulnerability is exploted the device will not be able to access the webserver unless the listen_http_lan parameter to uhttpd.json is manually fixed.Show less
CVE-2021-25810 1Mercusys 1Mercury X18g Firmware Nov 21, 2024 Apr 29, 2021 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Cross site Scripting (XSS) vulnerability in MERCUSYS Mercury X18G 1.0.5 devices, via crafted values to the 'src_dport_start', 'src_dport_end', and 'dest_port' parameters.
CVE-2021-23242 1Mercusys 1Mercury X18g Firmware Nov 21, 2024 Jan 7, 2021 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 MERCUSYS Mercury X18G 1.0.5 devices allow Directory Traversal via ../ to the UPnP server, as demonstrated by the /../../conf/template/uhttpd.json URI.
CVE-2021-23241 1Mercusys 1Mercury X18g Firmware Nov 21, 2024 Jan 7, 2021 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 MERCUSYS Mercury X18G 1.0.5 devices allow Directory Traversal via ../ in conjunction with a loginLess or login.htm URI (for authentication bypass) to the web server, as demonstrated by the /loginLess/../../etc/passwd URI...Show more MERCUSYS Mercury X18G 1.0.5 devices allow Directory Traversal via ../ in conjunction with a loginLess or login.htm URI (for authentication bypass) to the web server, as demonstrated by the /loginLess/../../etc/passwd URI.Show less