CVE-2025-10385

HIGH

Mercury KM08-708H GiGA WiFi Wave2 1.1 - Buffer Overflow

Title source: llm
STIX 2.1

Description

A vulnerability has been found in Mercury KM08-708H GiGA WiFi Wave2 1.1. Affected by this issue is the function sub_450B2C of the file /goform/mcr_setSysAdm. The manipulation of the argument ChgUserId leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

References (4)

Core 4
Core References
Permissions Required, VDB Entry vdb-entry technical-description
https://vuldb.com/?id.323820
Permissions Required, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.323820
Permissions Required, VDB Entry third-party-advisory
https://vuldb.com/?submit.643902

Scores

CVSS v3 8.8
EPSS 0.0016
EPSS Percentile 36.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-119 CWE-120
Status published
Products (1)
Mercury/KM08-708H GiGA WiFi Wave2 1.1
Published Sep 14, 2025
Tracked Since Feb 18, 2026