CyberRota Analysis
AI-GeneratedThe vulnerability affects the web interface of the Mercusys MB115-4G device, specifically in the http_gdpr_decrypt function, which is susceptible to a stack buffer overflow. An unauthenticated attacker can exploit this flaw by sending a specially crafted request to the /cgi/login endpoint, leading to memory corruption and crashing the httpd process, thereby causing a denial of service for the device's web administration service. Organizations using this device should prioritize patching or mitigating this vulnerability to maintain service availability and security.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Denial-of-service (DoS) vulnerability due to a stack buffer overflow in the http_gdpr_decrypt function of the Mercusys MB115-4G device's web interface. An unauthenticated attacker could exploit this vulnerability by sending a specially crafted request to the /cgi/login endpoint, causing memory corruption and the httpd process to crash, resulting in a denial of service for the web administration service.