Skip to content
OpenAdvisories
Unscored CVE-2021-25811 EUVD-2021-12694GHSA-575x-p9rr-ph24

MERCUSYS Mercury X18G 1.0.5 devices allow Denial of service via a crafted value to the POST listen_http_lan parameter. Upon subsequent devi…

Published Apr 29, 2021 · Updated Aug 3, 2024 · Assigned by mitre

Description

MERCUSYS Mercury X18G 1.0.5 devices allow Denial of service via a crafted value to the POST listen_http_lan parameter. Upon subsequent device restarts after this vulnerability is exploted the device will not be able to access the webserver unless the listen_http_lan parameter to uhttpd.json is manually fixed.

References