Vulnerability Description
A vulnerability has been found in Mercury KM08-708H GiGA WiFi Wave2 1.1. Affected by this issue is the function sub_450B2C of the file /goform/mcr_setSysAdm. The manipulation of the argument ChgUserId leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://github.com/Jjx-wy/kt/blob/main/KT%20KM08-708H.md
- https://vuldb.com/?ctiid.323820
- https://vuldb.com/?id.323820
- https://vuldb.com/?submit.643902
FAQ
What is CVE-2025-10385?
CVE-2025-10385 is a vulnerability with a CVSS score of 8.8 (HIGH). A vulnerability has been found in Mercury KM08-708H GiGA WiFi Wave2 1.1. Affected by this issue is the function sub_450B2C of the file /goform/mcr_setSysAdm. The manipulation of the argument ChgUserId...
How severe is CVE-2025-10385?
CVE-2025-10385 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-10385?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.