medium6.1Public exploit code
CVE-2012-4999
Mercury MR804 Router 8.0 3.8.1 Build 101220 Rel.53006nB allows remote attackers to cause a denial of service (service hang) via a crafted string in HTTP header…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Mercury MR804 Router - Multiple HTTP Header Fields Denial of Service Vulnerabilities2012-02-21 · dos · hardware · Verified
Impact
Mercury MR804 Router 8.0 3.8.1 Build 101220 Rel.53006nB allows remote attackers to cause a denial of service (service hang) via a crafted string in HTTP header fields such as (1) If-Modified-Since, (2) If-None-Match, or (3) If-Unmodified-Since. NOTE: some of these details are obtained from third party information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mercurycom | Mr804 Firmware | Version 3.8.1 |
| Mercurycom | Mr804 | Version 8.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2012-02/0116.html
- http://secunia.com/advisories/48079
- http://www.securityfocus.com/bid/52106
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73383
- http://archives.neohapsis.com/archives/bugtraq/2012-02/0116.html
- http://secunia.com/advisories/48079
- http://www.securityfocus.com/bid/52106
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73383