What’s Vulnerable › Vulnerabilities

CVE-2023-52162

• Severity: medium (CVSS 6.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-06-03 · updated 2026-06-17
• Weakness: CWE-121

Description

Mercusys MW325R EU V3 (Firmware MW325R(EU)_V3_1.11.0 Build 221019) is vulnerable to a stack-based buffer overflow, which could allow an attacker to execute arbitrary code. Exploiting the vulnerability requires authentication.

Affected products

• Mercusys Mw325R Eu V3: 1.11.0

References

• https://k4m1ll0.com/cve-2023-52162.html
• https://k4m1ll0.com/cve-2023-52162.html
• https://www.vicarius.io/vsociety/posts/mercusys-mw325r-reverse-engineering-part-3-authenticated-remote-code-execution-cve-2023-52162
• https://www.vicarius.io/vsociety/posts/mercusys-mw325r-reverse-engineering-part-3-authenticated-remote-code-execution-cve-2023-52162

Get alerted when CVE-2023-52162 or the next vulnerability affects your stack