CVE-2025-65288

MediumCVSS 6.5

Published: 09/12/2025(UTC)Updated: 18/10/2026(UTC)Translated: 18/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.40%

32th percentile - higher than 32% of all known CVEs

Summary

A buffer overflow in the Mercury MR816v2 (081C3114 4.8.7 Build 110427 Rel 36550n) occurs when the device accepts and stores excessively long hostnames from LAN hosts without proper length validation. The affected code performs unchecked copies/concatenations into fixed-size buffers. A crafted long hostname can overflow the buffer, cause a crash (DoS) and potentially enabling remote code execution.

Risk Assessment

An attacker on the LAN can exploit this vulnerability to achieve remote code execution or cause a DoS, potentially leading to device takeover or disruption of network services. The risk is high due to the potential for RCE.

Recommendation

Update the Mercury MR816v2 firmware to the latest version if available, or contact the vendor for a patch. Until then, consider restricting access to the management interface from untrusted networks.

Other vulnerabilities in Mercury MR816v2

CVE-2025-65289Medium
A stored Cross site scripting (XSS) vulnerability in the Mercury MR816v2 (081C3114 4.8.7 Build 110427 Rel 36550n) router allows a remote attacker on the LAN to inject JavaScript into the router's management UI by submitting a malicious hostname. The injected script is stored and later executed in the context of an administrator's browser (for example after DHCP release/renew triggers the interface to display the stored hostname). Because the management interface uses weak/basic authentication and does not properly protect or isolate session material, the XSS can be used to exfiltrate the admin session and perform administrative actions.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS