Vulnerability · Published Sep 14, 2025 · Assigned by VulDB
CVE-2025-10385Mercury KM08-708H GiGA WiFi Wave2 mcr_setSysAdm sub_450B2C buffer overflow
High 8.8
In plain English
A high-severity buffer overflow in KM08-708H GiGA WiFi Wave2 from Mercury. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 4.5% (higher than 91% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)4.5%top 8.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
A vulnerability has been found in Mercury KM08-708H GiGA WiFi Wave2 1.1. Affected by this issue is the function sub_450B2C of the file /goform/mcr_setSysAdm. The manipulation of the argument ChgUserId leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Mercury | KM08-708H GiGA WiFi Wave2 | 1.1 |
Weakness: CWE-120, CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R
References
- VDB-323820 | Mercury KM08-708H GiGA WiFi Wave2 mcr_setSysAdm sub_450B2C buffer overflow vdb-entry, technical-description
- VDB-323820 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
- Submit #643902 | Mercury Corporation KM08-708H（GiGA WiFi Wave2） v1.1 Buffer Overflow third-party-advisory
- https://github.com/Jjx-wy/kt/blob/main/KT%20KM08-708H.md exploit