← back
CVE-2025-10385

Mercury KM08-708H GiGA WiFi Wave2 mcr_setSysAdm sub_450B2C buffer overflow

CVSS 8.7 HIGHEPSS 3.5%CWE-119CWE-120
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 8.7EPSS 3.5%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
14 Sep 2025Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A vulnerability has been found in Mercury KM08-708H GiGA WiFi Wave2 1.1. Affected by this issue is the function sub_450B2C of the file /goform/mcr_setSysAdm. The manipulation of the argument ChgUserId leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Affected products
Mercury · KM08-708H GiGA WiFi Wave2

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://github.com/Jjx-wy/kt/blob/main/KT%20KM08-708H.mdhttps://vuldb.com/?ctiid.323820https://vuldb.com/?id.323820https://vuldb.com/?submit.643902