CVE-2025-65289
MEDIUM EPSS 21.8%
Published Dec 9, 20256mo ago · Modified Jun 17, 20262w ago
6.1 CVSS 3.1
Published Dec 9, 2025 6mo ago
Last Modified Jun 17, 2026 2w ago
Description
A stored Cross site scripting (XSS) vulnerability in the Mercury MR816v2 (081C3114 4.8.7 Build 110427 Rel 36550n) router allows a remote attacker on the LAN to inject JavaScript into the router's management UI by submitting a malicious hostname. The injected script is stored and later executed in the context of an administrator's browser (for example after DHCP release/renew triggers the interface to display the stored hostname). Because the management interface uses weak/basic authentication and does not properly protect or isolate session material, the XSS can be used to exfiltrate the admin session and perform administrative actions.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N Attack Vector Adjacent
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Changed
Confidentiality Low
Integrity Low
Availability None
Threat Intelligence
EPSS Exploit Probability
21.8% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available
Weaknesses 1
CWE-79 Cross-site Scripting Injection
Affected Products 2
| Vendor | Product | Version | Range |
|---|---|---|---|
| mercurycom | mr816_firmware | 081c3114_4.8.7 | any |
| mercurycom | mr816 | 2.0 | any |
References 1
- damiri.fr https://damiri.fr/en/cve/CVE-2025-65289
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.