Vulnerability · Published Jul 20, 2025 · Assigned by VulDB

CVE-2025-7882Mercusys MW301R Login excessive authentication

Low 3.1

In plain English

A low-severity security flaw in MW301R from Mercusys. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 27% of all known vulnerabilities).

Severity (CVSS 3.1)3.1Low

Exploit odds (30 days)0.3%top 73.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A vulnerability was found in Mercusys MW301R 1.0.2 Build 190726 Rel.59423n. It has been rated as problematic. This issue affects some unknown processing of the component Login. The manipulation leads to improper restriction of excessive authentication attempts. The attack can only be initiated within the local network. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products (as reported)

Vendor	Product	Versions
Mercusys	MW301R	1.0.2 Build 190726 Rel.59423n

Weakness: CWE-307, CWE-799 · Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R

References

VDB-316997 | Mercusys MW301R Login excessive authentication vdb-entry
VDB-316997 | CTI Indicators (IOB, IOC, TTP) signature, permissions-required
Submit #611431 | Mercusys Router MW301R 1.0.2 Build 190726 Rel.59423n (4252) 7PK Security Features / Brute Force via IP Cycling third-party-advisory
https://github.com/RaulPazemecxas/PoCVulDb/blob/main/README21.md broken-link, exploit