Mercury records
2 published records for vendor Mercury.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.
Recurring classes
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
2 records| Action | CVE | Vulnerability | Severity | EPSS · Published |
|---|---|---|---|---|
41Plan | CVE-2020-22724No exploit | A remote command execution vulnerability exists in add_server_service of PPTP_SERVER in Mercury Router MER1200 v1.0.1 and Mercury Router MERmercury · mer1200 firmware · CWE-78 | Critical9.8 | 5.5%Oct 14, 2021 |
27Monitor | CVE-2024-46215No exploit | A vulnerability was discovered in KM08-708H-v1.1, There is a buffer overflow in the sub_445BDC() function within the /usr/sbin/goahead progrCWE-120 | Medium6.5 | 2.9%Oct 11, 2024 |
- CVE-2020-2272441Plan
A remote command execution vulnerability exists in add_server_service of PPTP_SERVER in Mercury Router MER1200 v1.0.1 and Mercury Router MER
CriticalCVSS 9.8No exploitEPSS 5%mercury · mer1200 firmwareOct 14, 2021
- CVE-2024-4621527Monitor
A vulnerability was discovered in KM08-708H-v1.1, There is a buffer overflow in the sub_445BDC() function within the /usr/sbin/goahead progr
MediumCVSS 6.5No exploitEPSS 2%Oct 11, 2024