Micro Research Ltd.
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| MR-GM5A-L1 | 3 | – | Mar 11, 2026 |
| MR-GM5L-S1 | 3 | – | Mar 11, 2026 |
| MR-GM2 | 1 | – | Oct 11, 2023 |
| MR-GM3 (-D/-K/-S/-DK/-DKS/-M/-W) | 1 | – | Oct 11, 2023 |
Exploited and recent CVEs
- CVE-2026-27842 Authentication bypass issue exists in MR-GM5L-S1 and MR-GM5A-L1, which may allow an attacker to bypass authentication and change the device configuration. 0.7%
- CVE-2026-27842 Authentication bypass issue exists in MR-GM5L-S1 and MR-GM5A-L1, which may allow an attacker to bypass authentication and change the device configuration. 0.7%
- CVE-2026-24448 Use of hard-coded credentials issue exists in MR-GM5L-S1 and MR-GM5A-L1, which may allow an attacker to obtain administrative access. 0.4%
- CVE-2026-24448 Use of hard-coded credentials issue exists in MR-GM5L-S1 and MR-GM5A-L1, which may allow an attacker to obtain administrative access. 0.4%
- CVE-2026-20892 Code injection vulnerability exists in MR-GM5L-S1 and MR-GM5A-L1, which may allow an attacker with administrative privileges to execute arbitrary commands. 0.6%
- CVE-2026-20892 Code injection vulnerability exists in MR-GM5L-S1 and MR-GM5A-L1, which may allow an attacker with administrative privileges to execute arbitrary commands. 0.6%
- CVE-2023-45194 Use of default credentials vulnerability in MR-GM2 firmware Ver. 3.00.03 and earlier, and MR-GM3 (-D/-K/-S/-DK/-DKS/-M/-W) firmware Ver. 1.03.45 and earlier allows a network-adjacent unauthenticated a 0.3%
- CVE-2023-45194 Use of default credentials vulnerability in MR-GM2 firmware Ver. 3.00.03 and earlier, and MR-GM3 (-D/-K/-S/-DK/-DKS/-M/-W) firmware Ver. 1.03.45 and earlier allows a network-adjacent unauthenticated a 0.3%