Mercusys Mercury X18g
4 CVEs affecting Mercusys Mercury X18g. Latest disclosed: 2021-04-29. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-25811 | High | 7.5 | 2021-04-29 | MERCUSYS Mercury X18G 1.0.5 devices allow Denial of service via a crafted value to the POST listen_http_lan parameter. Upon subsequent device restarts after th… |
CVE-2021-25810 | Medium | 6.1 | 2021-04-29 | Cross site Scripting (XSS) vulnerability in MERCUSYS Mercury X18G 1.0.5 devices, via crafted values to the 'src_dport_start', 'src_dport_end', and 'dest_port'… |
CVE-2021-23242 | Medium | 5.3 | 2021-01-07 | MERCUSYS Mercury X18G 1.0.5 devices allow Directory Traversal via ../ to the UPnP server, as demonstrated by the /../../conf/template/uhttpd.json URI. |
CVE-2021-23241 | Medium | 5.3 | 2021-01-07 | MERCUSYS Mercury X18G 1.0.5 devices allow Directory Traversal via ../ in conjunction with a loginLess or login.htm URI (for authentication bypass) to the web s… |