What is CVE-2025-65288?

CVE-2025-65288 is a medium-severity vulnerability in Mercurycom Mr816, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 6.5/10. Published 2025-12-09.

How severe is CVE-2025-65288?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Buffer overflow in Mercurycom Mr816

CVE-2025-65288

A buffer overflow in the Mercury MR816v2 (081C3114 4.8.7 Build 110427 Rel 36550n) occurs when the device accepts and stores excessively long hostnames from LAN hosts without proper length validation. The affected code performs unchecked co…

Vulnerability class: Buffer Overflow

EPSS: 0.004 (26.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Mercurycom Mr816 — versions 2.0
Mercurycom Mr816_firmware — versions 081c3114_4.8.7
N/a — versions n/a

Weakness classification (CWE)

CWE-120 — Buffer Copy without Checking Size of Input (Classic Buffer Overflow)

References

cve@mitre.org (Exploit, Third Party Advisory)

Frequently asked questions

What is CVE-2025-65288?: CVE-2025-65288 is a medium-severity vulnerability in Mercurycom Mr816, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 6.5/10. Published 2025-12-09.
How severe is CVE-2025-65288?: Medium severity. CVSS v3 base score is 6.5 out of 10.