PT-2021-10783 · Mercury · Mercury Router Mer1200

Mrrtcl · Published 2021-10-14 · Updated 2022-10-26 · CVE-2020-22724

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mercury Router MER1200 version 1.0.1 Mercury Router MER1200G version 1.0.1

Description A remote command execution issue exists in the add server service of PPTP SERVER in the affected routers.

Recommendations For Mercury Router MER1200 version 1.0.1, consider disabling the add server service function until a patch is available. For Mercury Router MER1200G version 1.0.1, consider disabling the add server service function until a patch is available.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2020-22724

Affected Products

Mercury Router Mer1200

References · 4

• 🔥 https://github.com/DarkEyeR/CVE_Apply/blob/master/Mercury/Mercury%20MER1200%20Router%20v1.0.1%20RCE%20%20.md · Exploit
• https://osv.dev/vulnerability/CVE-2020-22724 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-22724 · Security Note
• https://cwe.mitre.org/data/definitions/78.html · Note