Skip to content
Noroxi

mercurycom records

13 published records for vendor mercurycom.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 22
  2. 23
  3. 24
  4. 25
  5. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

13 records
  • CVE-2023-46518
    40Plan

    Mercury A15 V1.0 20230818_1.0.3 was discovered to contain a command execution vulnerability via the component cloudDeviceTokenSuccCB.

    CriticalCVSS 9.8No exploitEPSS 2%

    mercurycom · a15 firmwareOct 25, 2023

  • CVE-2026-35903
    39Monitor

    MERCURY MIPC252W IP camera 1.0.5 Build 230306 Rel.79931n contains an improper authentication vulnerability in the RTSP service.

    CriticalCVSS 9.8No exploitEPSS 1%

    mercurycom · mipc252w firmwareApr 27, 2026

  • CVE-2025-50401
    39Monitor

    Mercury D196G d196gv1-cn-up_2020-01-09_11.21.44 is vulnerable to Buffer Overflow in the function sub_404CAEDC via the parameter password.

    CriticalCVSS 9.8No exploitEPSS 0%

    mercurycom · d196g firmwareDec 16, 2025

  • CVE-2025-50398
    39Monitor

    Mercury D196G d196gv1-cn-up_2020-01-09_11.21.44 is vulnerable to Buffer Overflow in the function sub_404CAEDC via the parameter fac_password

    CriticalCVSS 9.8No exploitEPSS 0%

    mercurycom · d196g firmwareDec 16, 2025

  • CVE-2022-31849
    36Monitor

    MERCURY MIPC451-4 1.0.22 Build 220105 Rel.55642n was discovered to contain a remote code execution (RCE) vulnerability which is exploitable

    HighCVSS 8.8No exploitEPSS 2%

    mercurycom · mipc451-4 firmwareJun 16, 2022

  • CVE-2021-27825
    32Monitor

    A directory traversal vulnerability on Mercury MAC1200R devices allows attackers to read arbitrary files via a web-static/ URL.

    HighCVSS 7.5Proof of conceptEPSS 8%

    mercurycom · mac1200r firmwareMay 29, 2023

  • CVE-2026-31256
    30Monitor

    A null pointer dereference vulnerability exists in the RTSP service of the MERCURY MIPC252W 1.0.5 Build 230306 Rel.79931n.

    HighCVSS 7.5No exploitEPSS 0%

    mercurycom · mipc252w firmwareApr 27, 2026

  • CVE-2024-8655
    27Monitor

    Mercury MNVR816 web-static file access

    MediumCVSS 6.9No exploitEPSS 0%

    mercury · mnvr816Sep 10, 2024

  • CVE-2012-4999
    26Monitor

    Mercury MR804 Router 8.0 3.8.1 Build 101220 Rel.53006nB allows remote attackers to cause a denial of service (service hang) via a crafted st

    MediumCVSS 6.1Proof of conceptEPSS 7%

    mercurycom · mr804 firmwareSep 19, 2012

  • CVE-2025-65288
    26Monitor

    A buffer overflow in the Mercury MR816v2 (081C3114 4.8.7 Build 110427 Rel 36550n) occurs when the device accepts and stores excessively long

    MediumCVSS 6.5No exploitEPSS 0%

    mercurycom · mr816 firmwareDec 9, 2025

  • CVE-2025-65289
    24Monitor

    A stored Cross site scripting (XSS) vulnerability in the Mercury MR816v2 (081C3114 4.8.7 Build 110427 Rel 36550n) router allows a remote att

    MediumCVSS 6.1No exploitEPSS 0%

    mercurycom · mr816 firmwareDec 9, 2025

  • CVE-2026-35902
    24Monitor

    The RTSP service of MERCURY IP camera MIPC252W 1.0.5 Build 230306 has an issue handling failed Digest authentication attempts.

    MediumCVSS 6.2No exploitEPSS 0%

    mercurycom · mipc252w firmwareApr 27, 2026

  • CVE-2026-35901
    17Monitor

    A handling issue in the RTSP service of the Mercury MIPC252W 1.0.5 Build 230306 Rel.79931n allows an authenticated attacker to trigger sessi

    MediumCVSS 4.4No exploitEPSS 0%

    mercurycom · mipc252w firmwareApr 27, 2026