VULNERABILITY INTELLIGENCE

CVE-2025-65288

CVSS score6.5 MEDIUM
EPSS probability0.40%
CISA KEVNot currently listed
Published2025-12-09
Last modified2026-10-18
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

A buffer overflow in the Mercury MR816v2 (081C3114 4.8.7 Build 110427 Rel 36550n) occurs when the device accepts and stores excessively long hostnames from LAN hosts without proper length validation. The affected code performs unchecked copies/concatenations into fixed-size buffers. A crafted long hostname can overflow the buffer, cause a crash (DoS) and potentially enabling remote code execution.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-120

Primary references