CVE-2025-7882

Name of the Vulnerable Software and Affected Versions Mercusys MW301R version 1.0.2 Build 190726 Rel.59423n

Description A vulnerability exists in the Login component of Mercusys MW301R. The issue involves improper restriction of excessive authentication attempts. The attack can only be initiated within the local network and is considered difficult to exploit. The exploit has been publicly disclosed. The vendor was contacted about this disclosure but did not respond.

Recommendations Update to a newer version of Mercusys MW301R firmware that addresses this issue.