{"id":8434,"date":"2025-07-20T05:49:31","date_gmt":"2025-07-20T05:49:31","guid":{"rendered":"http:\/\/localhost\/?p=8434"},"modified":"2025-07-20T05:49:31","modified_gmt":"2025-07-20T05:49:31","slug":"mercusys-mw301r-web-interface-password-recovery","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=8434","title":{"rendered":"Mercusys MW301R Web Interface password recovery"},"content":{"rendered":"
\n

CVE Details<\/h2>\n
\n
\n

Basic Information<\/h3>\n\n\n\n\n\n
Title<\/th>\nMercusys MW301R Web Interface password recovery<\/td>\n<\/tr>\n
Type<\/th>\ncve<\/td>\n<\/tr>\n
Published<\/th>\n2025-07-20T09:44:05.074Z<\/td>\n<\/tr>\n
Modified<\/th>\n2025-07-20T09:44:05.074Z<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Product Information<\/h3>\n\n\n\n\n
Vendor<\/th>\nMercusys<\/td>\n<\/tr>\n
Product<\/th>\nMW301R<\/td>\n<\/tr>\n
Version<\/th>\n1.0.2 Build 190726 Rel.59423n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
\n

CVSS Information<\/h3>\n\n\n\n
Base Score<\/th>\n5.1 (MEDIUM)<\/td>\n<\/tr>\n
Attack Vector<\/th>\nCVSS:4.0\/AV:N\/AC:L\/AT:N\/PR:H\/UI:N\/VC:N\/VI:L\/VA:N\/SC:N\/SI:N\/SA:N\/E:P<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

AI Analysis<\/h3>\n\n\n\n\n\n\n
AI Description<\/th>\nA vulnerability in the Mercusys MW301R router’s web interface allows attackers to exploit weak password recovery mechanisms, potentially leading to unauthorized access. The issue is remotely exploitable, and the vendor has not provided a patch.<\/td>\n<\/tr>\n
AI Severity<\/th>\nMedium<\/td>\n<\/tr>\n
AI Vendor<\/th>\nMercusys<\/td>\n<\/tr>\n
AI Product<\/th>\nMW301R<\/td>\n<\/tr>\n
AI Version<\/th>\n1.0.2 Build 190726 Rel.59423n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Affected Products<\/h4>\n