Improper Authentication in Mercusys MW301R Router

CVE-2025-7882

What is CVE-2025-7882?

A security flaw in the Mercusys MW301R router version 1.0.2 Build 190726 Rel.59423n allows improper restriction of excessive authentication attempts on the login interface. This vulnerability can only be exploited from within the local network, making it a localized threat. Although the complexity of exploiting this vulnerability is deemed high, public disclosure has occurred, and methods may be available for malicious actors to attempt exploitation. The vendor has been notified but has not provided any official response on the matter.

References