CVE-2021-23241 Scanner

The MERCUSYS Mercury X18G software, also known as a router, is used to manage internet connections and distribute them to various devices within a network, such as smartphones, computers, and gaming consoles. This product is designed to ensure the stable and secure connectivity of multiple devices at the same time. It offers advanced features to enhance the browsing experience, as well as security and parental control options to protect children from inappropriate content.

Recently, a vulnerability denoted by CVE-2021-23241 has been detected in the MERCUSYS Mercury X18G software. This vulnerability results from a Directory Traversal flaw. Attackers can exploit the flaw by accessing the web server using a loginLess or login.htm URI and combining it with ../. For example, if an attacker were to use the URI /loginLess/../../../etc/passwd, they would be able to access the password file and possibly obtain sensitive information.

When the CVE-2021-23241 vulnerability in MERCUSYS Mercury X18G software is exploited, attackers can gain access to device credentials, user data, and confidential information. This can cause damage to the device and result in significant harm to user privacy and security. The vulnerability can also allow attackers to use the device as a launching pad for further attacks against other devices on the network.

At securityforeveryone.com, we offer pro features that enable users to easily and quickly identify vulnerabilities in their digital assets. Our platform is designed to provide users with up-to-date information on the latest vulnerabilities and offer recommendations on the best methods to address them. We encourage users to take advantage of our security resources to ensure that their devices and networks remain secure and protected from the ever-present threat of cyberattacks. With our pro features, users can stay vigilant against the latest security threats and keep their digital assets secure.

REFERENCES

• https://github.com/BATTZION/MY_REQUEST/blob/master/Mercury%20Router%20Web%20Server%20Directory%20Traversal.md
• https://www.mercurycom.com.cn/product-521-1.html
• https://www.mercusys.com/en/