Mb115 4G
Monthly
Denial-of-service in the Mercusys MB115-4G router's web interface allows unauthenticated attackers to crash the administration service by sending a crafted request to the /cgi/login endpoint. A stack buffer overflow in the http_gdpr_decrypt function corrupts memory and halts the httpd process, leaving the device operational but unmanageable through the web UI. A vendor patch is available; no public exploit or active exploitation has been identified.
Denial-of-service in the Mercusys MB115-4G router's web interface allows unauthenticated attackers to crash the administration service by sending a crafted request to the /cgi/login endpoint. A stack buffer overflow in the http_gdpr_decrypt function corrupts memory and halts the httpd process, leaving the device operational but unmanageable through the web UI. A vendor patch is available; no public exploit or active exploitation has been identified.