PT-2025-50102 · Unknown · Mercury Mr816V2

Published 2025-12-09 · Updated 2025-12-22 · CVE-2025-65289

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Mercury MR816v2 version 4.8.7 Build 110427 Rel 36550n

Description A stored Cross Site Scripting (XSS) flaw exists in the Mercury MR816v2 router. A remote attacker on the Local Area Network (LAN) can inject JavaScript into the router’s management User Interface (UI) by providing a malicious hostname. The injected script is saved and then executed when an administrator accesses the interface, such as after a DHCP release and renew. The management interface employs weak authentication and does not adequately protect session data, allowing an attacker to potentially steal the administrator’s session and carry out administrative tasks. The attack vector involves submitting a malicious hostname.

Recommendations For Mercury MR816v2 version 4.8.7 Build 110427 Rel 36550n, update to a newer version that contains a fix for this vulnerability.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-65289

Affected Products

Mercury Mr816V2

References · 6

• 🔥 https://damiri.fr/en/cve/CVE-2025-65289 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-65289 · Security Note
• https://osv.dev/vulnerability/CVE-2025-65289 · Vendor Advisory
• https://twitter.com/UndercodeUpdate/status/1999087655439790588 · Twitter Post
• https://twitter.com/CVEnew/status/2003233991365935411 · Twitter Post
• https://t.me/cveNotify/145619 · Telegram Post