CVE-2025-10385
Published: 14 September 2025
Summary
CVE-2025-10385 is a high-severity Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119) vulnerability. Its CVSS base score is 7.4 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 46.2th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-2 (Flaw Remediation).
Deeper analysis
CVE-2025-10385 is a buffer overflow vulnerability in Mercury KM08-708H GiGA WiFi Wave2 version 1.1. The flaw affects the function sub_450B2C in the file /goform/mcr_setSysAdm, where manipulation of the ChgUserId argument triggers the overflow. It is remotely exploitable and associated with CWE-119 and CWE-120.
An attacker with low privileges can exploit this vulnerability over the network with low complexity and no user interaction, as indicated by its CVSS v3.1 base score of 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Successful exploitation enables high-impact compromise of confidentiality, integrity, and availability, potentially allowing arbitrary code execution or denial of service on the affected device.
VulDB advisories (vuldb.com/?ctiid.323820, vuldb.com/?id.323820, vuldb.com/?submit.643902) document the issue, and a proof-of-concept exploit is publicly disclosed on GitHub (github.com/Jjx-wy/kt/blob/main/KT%20KM08-708H.md), which may facilitate active attacks. No patches or mitigations are detailed in the available references.
The exploit disclosure heightens the risk of real-world exploitation against unpatched Mercury KM08-708H GiGA WiFi Wave2 1.1 devices.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-29104
Vulnerability details
A vulnerability has been found in Mercury KM08-708H GiGA WiFi Wave2 1.1. Affected by this issue is the function sub_450B2C of the file /goform/mcr_setSysAdm. The manipulation of the argument ChgUserId leads to buffer overflow. It is possible to initiate the…
more
attack remotely. The exploit has been disclosed to the public and may be used.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Remote buffer overflow in public web form (/goform/) directly enables exploitation of a public-facing application for RCE.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly prevents buffer overflow exploitation by validating the ChgUserId argument in the /goform/mcr_setSysAdm endpoint using defined tools and procedures.
Requires timely identification, reporting, and correction of the buffer overflow flaw in sub_450B2C, including testing updates before deployment.
Mitigates arbitrary code execution from the buffer overflow via memory safeguards such as ASLR, DEP, and stack canaries on the affected device.