PT-2025-30184 · Mercusys · Mercusys Mw301R

Raulpacxxx · Published 2025-07-20 · Updated 2025-07-20 · CVE-2025-7882

Positive Technologies (AI Summary)

CVSS v3.1

3.1

Low

Base vector

AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Mercusys MW301R version 1.0.2 Build 190726 Rel.59423n

Description A vulnerability exists in the Login component of Mercusys MW301R. The issue involves improper restriction of excessive authentication attempts. The attack can only be initiated within the local network and is considered difficult to exploit. The exploit has been publicly disclosed. The vendor was contacted about this disclosure but did not respond.

Recommendations Update to a newer version of Mercusys MW301R firmware that addresses this issue.

Exploit

Fix

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

CWE-799

Related Identifiers

CVE-2025-7882

Affected Products

Mercusys Mw301R

References · 10

• 🔥 https://github.com/RaulPazemecxas/PoCVulDb/blob/main/README21.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-7882 · Security Note
• https://twitter.com/VulmonFeeds/status/1946900400147165361 · Twitter Post
• https://t.me/cvenotify/129595 · Telegram Post
• https://vuldb.com/?id.316997 · Note
• https://vuldb.com/?submit.611431 · Note
• https://twitter.com/marcin_brz81183/status/1946925155998900593 · Twitter Post
• https://twitter.com/CVEnew/status/1946883518480449849 · Twitter Post
• https://vuldb.com/?ctiid.316997 · Note
• https://t.me/cvetracker/28258 · Telegram Post