CVE-2025-10392
Published: 14 September 2025
Summary
CVE-2025-10392 is a high-severity Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119) vulnerability. Its CVSS base score is 8.9 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 38.0th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-16 (Memory Protection).
Deeper analysis
CVE-2025-10392 is a stack-based buffer overflow vulnerability affecting the Mercury KM08-708H GiGA WiFi Wave2 firmware version 1.1.14. The flaw resides in an unknown function within the HTTP Header Handler component, where manipulation of the Host argument triggers the overflow. Published on 2025-09-14, it is associated with CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer) and CWE-121 (Stack-based Buffer Overflow).
The vulnerability enables remote exploitation over the network by unauthenticated attackers requiring no privileges or user interaction, with low attack complexity. Successful exploitation grants high impacts on confidentiality, integrity, and availability (CVSS v3.1 base score of 9.8: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), potentially allowing arbitrary code execution.
Advisories provide details via VulDB entries (https://vuldb.com/?ctiid.323827, https://vuldb.com/?id.323827, https://vuldb.com/?submit.644596) and a GitHub PDF analysis (https://github.com/mohdkey/IOT-CVE/blob/main/KT_GIGA_WIFI-Wave%202%20has%20a%20stack%20overflow%20vulnerability.pdf). The exploit is publicly available, increasing the risk of active misuse.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-29113
Vulnerability details
A vulnerability was detected in Mercury KM08-708H GiGA WiFi Wave2 1.1.14. This affects an unknown function of the component HTTP Header Handler. The manipulation of the argument Host results in stack-based buffer overflow. The attack can be executed remotely. The…
more
exploit is now public and may be used.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Stack-based buffer overflow in HTTP Header Handler of public-facing device firmware directly enables remote unauthenticated RCE via network exploitation of a public-facing application.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly mandates timely remediation of the stack-based buffer overflow vulnerability in the HTTP Header Handler through firmware patching to eliminate exploitability.
Requires validation of HTTP Host header inputs to block malformed or oversized arguments that trigger the stack buffer overflow.
Implements memory safeguards like stack canaries and non-executable stacks to prevent arbitrary code execution from successful Host header buffer overflows.