CVE-2025-10392 — AI Deep Analysis Summary

🚨 **Essence**: Stack Buffer Overflow in HTTP Header Handler. 💥 **Consequence**: Remote Code Execution (RCE). Attackers can take full control of the device via malicious Host headers.

🛠️ **Root Cause**: **CWE-121** (Stack-based Buffer Overflow). The component fails to properly validate the length of the **Host** parameter in HTTP requests, causing memory corruption.

📦 **Affected**: **Mercury** (China). 📱 **Product**: KM08-708H GiGA WiFi Wave2. 📅 **Version**: Specifically **1.1.14**. Check your router firmware version immediately!

🔓 **Privileges**: **Remote** & **Unauthenticated**. 📊 **Impact**: **High** (CVSS 3.1). Full access to Confidentiality, Integrity, and Availability. Hackers can execute arbitrary code on your network.

⚡ **Threshold**: **LOW**. 🌐 **Network**: Attack vector is **Network** (AV:N). 🔑 **Auth**: **None** required (PR:N). No login needed to trigger the exploit. Extremely dangerous!

📂 **Exploit Status**: **Yes**. 📄 **Evidence**: References include a PDF labeled as **exploit** and third-party advisories (VDB-323827). PoCs or technical descriptions are likely circulating.

🔍 **Self-Check**: Scan for **HTTP Host Header** anomalies. 📡 **Tools**: Use fuzzing tools to send oversized Host headers to port 80/443. Check if the router crashes or returns error codes indicative of overflow.

🛡️ **Fix Status**: **Unknown/Not Listed**. ⚠️ **Warning**: The provided data shows **no official patch** or vendor advisory link confirming a fix. Assume it is **UNPATCHED** until verified.

🚧 **Workaround**: 🚫 **Block External Access**: Disable WAN access to the router's admin interface. 🛑 **Filter Headers**: If possible, use a firewall to drop malformed HTTP Host headers. Isolate the device on a VLAN.

🔥 **Urgency**: **CRITICAL**. 🚨 **Priority**: **P1**. With **CVSS 9.8** (implied by H/I/H) and **No Auth** required, this is a high-risk RCE. Patch immediately or disconnect from the internet!