CVE-2021-25811

Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

Published: 29/04/2021 Updated: 08/05/2021

CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 694

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

MERCUSYS Mercury X18G 1.0.5 devices allow Denial of service via a crafted value to the POST listen_http_lan parameter. Upon subsequent device restarts after this vulnerability is exploted the device will not be able to access the webserver unless the listen_http_lan parameter to uhttpd.json is manually fixed.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mercusys mercury x18g firmware 1.0.5

NVD-CWE-noinfo https://www.mercusys.com/en/https://www.mercurycom.com.cn/product-521-1.html https://github.com/pokerfacett/MY_REQUEST/blob/master/Mercury%20Router%20X18g%20v1.0.5%20Denial%20of%20Service.md https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2021-25811

Vulnerability Summary

Vulnerability Trend

References

Vulmon Search

About

Products

Connect