Skip to content
Brand AI

Mercury

Controversies

Controversies tied to this brand in public sources. A listing is not a finding of fault.

Back to profile1 entries

  1. 2021

    Multiple Mercury router models hit by high-risk flaws including remote command execution

    According to the China National Vulnerability Database (CNVD-2021-02626) and CVE records, the PPTP service of Mercury MER1200 and MER1200G v1.0.1 routers has a command injection vulnerability (CVE-2020-22724), allowing attackers to execute commands remotely; the UPnP service of MERCUSYS Mercury X18G 1.0.5 has a directory traversal vulnerability (CVE-2021-23242), allowing sensitive files to be read. In 2013, the WooYun platform also disclosed that Mercury wireless routers' default admin/admin credentials and Telnet port could lead to Wi-Fi password leakage. Impact and handling: exposed weak security design in low-priced home routers; the manufacturer fixed the issues with firmware updates. Progress: media reports. Entity: Shenzhen Meikexing Communication Technology Co., Ltd. (Mercury Network). Scope: Mercury MER1200/MER1200G/X18G and other routers.

    Source