Vulnerabilities > Mercurycom
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-10-25 | CVE-2023-46518 | Out-of-bounds Write vulnerability in Mercurycom A15 Firmware 1.0202308181.0.3 Mercury A15 V1.0 20230818_1.0.3 was discovered to contain a command execution vulnerability via the component cloudDeviceTokenSuccCB. | 9.8 |
| 2023-05-29 | CVE-2021-27825 | Path Traversal vulnerability in Mercurycom Mac1200R Firmware A directory traversal vulnerability on Mercury MAC1200R devices allows attackers to read arbitrary files via a web-static/ URL. | 7.5 |
| 2022-06-16 | CVE-2022-31849 | Unspecified vulnerability in Mercurycom Mipc451-4 Firmware 1.0.22 MERCURY MIPC451-4 1.0.22 Build 220105 Rel.55642n was discovered to contain a remote code execution (RCE) vulnerability which is exploitable via a crafted POST request. | 8.8 |
| 2012-09-19 | CVE-2012-4999 | Improper Input Validation vulnerability in Mercurycom Mr804 and Mr804 Firmware Mercury MR804 Router 8.0 3.8.1 Build 101220 Rel.53006nB allows remote attackers to cause a denial of service (service hang) via a crafted string in HTTP header fields such as (1) If-Modified-Since, (2) If-None-Match, or (3) If-Unmodified-Since. | 6.1 |