CVE-2025-7882 (CNNVD-202507-2556)
中文标题:
Mercusys MW301R 安全漏洞
英文标题:
Mercusys MW301R Login excessive authentication
漏洞描述
中文描述:
Mercusys MW301R是中国Mercusys公司的一款路由器。 Mercusys MW301R 1.0.2 Build 190726 Rel.59423n版本存在安全漏洞，该漏洞源于Login组件认证尝试限制不当。
英文描述:
A vulnerability was found in Mercusys MW301R 1.0.2 Build 190726 Rel.59423n. It has been rated as problematic. This issue affects some unknown processing of the component Login. The manipulation leads to improper restriction of excessive authentication attempts. The attack can only be initiated within the local network. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| Mercusys | MW301R | 1.0.2 Build 190726 Rel.59423n | - | - |
cpe:2.3:a:mercusys:mw301r:1.0.2_build_190726_rel.59423n:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
参考链接
cve.org
cve.org
cve.org
cve.org
CVSS评分详情
4.0 (cna)
LOWCVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
3.1 (cna)
LOWCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R
3.0 (cna)
LOWCVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R
2.0 (cna)
LOWAV:A/AC:H/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2025-7882 |
2025-11-11 15:23:36 | 2025-11-11 07:40:52 |
| NVD | nvd_CVE-2025-7882 |
2025-11-11 15:00:57 | 2025-11-11 07:48:38 |
| CNNVD | cnnvd_CNNVD-202507-2556 |
2025-11-11 15:12:51 | 2025-11-11 08:00:01 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 其他
- cnnvd_id: 未提取 -> CNNVD-202507-2556
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- data_sources: ['cve'] -> ['cve', 'nvd']