1. Home
  2. CVE Database
  3. CVE-2025-65288
MEDIUM · 6.5

CVE-2025-65288

A buffer overflow in the Mercury MR816v2 (081C3114 4.8.7 Build 110427 Rel 36550n) occurs when the device accepts and stores excessively long hostnames from LAN hosts without proper length validation. ...

Vulnerability Description

A buffer overflow in the Mercury MR816v2 (081C3114 4.8.7 Build 110427 Rel 36550n) occurs when the device accepts and stores excessively long hostnames from LAN hosts without proper length validation. The affected code performs unchecked copies/concatenations into fixed-size buffers. A crafted long hostname can overflow the buffer, cause a crash (DoS) and potentially enabling remote code execution.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
MercurycomMr816 Firmware081c3114_4.8.7
MercurycomMr8162.0

Related Weaknesses (CWE)

CWE-120

References

FAQ

What is CVE-2025-65288?

CVE-2025-65288 is a vulnerability with a CVSS score of 6.5 (MEDIUM). A buffer overflow in the Mercury MR816v2 (081C3114 4.8.7 Build 110427 Rel 36550n) occurs when the device accepts and stores excessively long hostnames from LAN hosts without proper length validation. ...

How severe is CVE-2025-65288?

CVE-2025-65288 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-65288?

Check the references section above for vendor advisories and patch information. Affected products include: Mercurycom Mr816 Firmware, Mercurycom Mr816.