PT-2025-30183 · Mercusys · Mercusys Mw301R

Raulpacxxx · Published 2025-07-20 · Updated 2025-07-21 · CVE-2025-7881

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:N/AC:L/Au:M/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Mercusys MW301R version 1.0.2 Build 190726 Rel.59423n

Description A vulnerability exists in the Web Interface component of Mercusys MW301R. Manipulation of the code argument allows for weak password recovery, and the attack can be initiated remotely. The exploit for this issue has been publicly disclosed.

Recommendations Mercusys MW301R version 1.0.2 Build 190726 Rel.59423n: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-640

Related Identifiers

CVE-2025-7881

Affected Products

Mercusys Mw301R

References · 11

• 🔥 https://github.com/RaulPazemecxas/PoCVulDb/blob/main/README20.md · Exploit
• 🔥 https://vuldb.com/?submit.611328 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-7881 · Security Note
• https://vuldb.com/?id.316996 · Note
• https://twitter.com/marcin_brz81183/status/1946921171867320351 · Twitter Post
• https://t.me/cvenotify/129594 · Telegram Post
• https://t.me/cvetracker/28257 · Telegram Post
• https://twitter.com/CVEnew/status/1946870662640906377 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1946905519156765176 · Twitter Post
• https://vuldb.com/?ctiid.316996 · Note
• https://t.me/cvenotify/129701 · Telegram Post