CVE-2025-50401CWE-120

CVE-2025-50401

Critical · published December 16, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
36.0
In the wild
Unconfirmed
What it is

🚨 A buffer overflow in Mercury D196G could lead to complete chaos! Just one rogue password input is all it takes to exploit this critical vulnerability! 🔥 Think of this like a crowded elevator that can only hold a certain number of people. If too many people squeeze in, it can break down, causing a big mess for everyone inside and outside! This buffer overflow vulnerability allows an attacker to overwrite memory, potentially gaining unauthorized access or crashing the system entirely. Depending on how the overflow is handled, they could even execute arbitrary code, leading to devastating consequences for your data and security.

Put simply

Think of this like a crowded elevator that can only hold a certain number of people. If too many people squeeze in, it can break down, causing a big mess for everyone inside and outside! The vulnerability occurs in the function sub_404CAEDC when it processes the 'password' parameter. If an attacker inputs a maliciously crafted password, the overflow can compromise the system's memory management, leading to potential code execution.

What to do

This buffer overflow vulnerability allows an attacker to overwrite memory, potentially gaining unauthorized access or crashing the system entirely. Depending on how the overflow is handled, they could even execute arbitrary code, leading to devastating consequences for your data and security. Update your Mercury D196G to the latest version to patch this buffer overflow vulnerability. Review code that handles user inputs and implement proper bounds checking to protect against future exploits. Don't wait! You’ve got this! With these steps, you can lock down your systems and safeguard against potential threats! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00428 · 36.0th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2025-12-16T22:16Z
Affected products (1)
ProductVersionsFixed in
mercurycom/d196g_firmwareall versions—
References (2)
EPSS history
Timeline
  • 16 DEC 00:00Z
    Mercury D196G d196gv1-cn-up_2020-01-09_11.21.44 is vulnerable to Buffer Overflow in the function sub_404CAEDC via the parameter password
    cvelistv5