CVE-2021-27825

published 2023-05-29

CVE-2021-27825: A directory traversal vulnerability on Mercury MAC1200R devices allows attackers to read arbitrary files via a web-static/ URL.

Priority P2 60 high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C H I N A N

EXPLOIT

A directory traversal vulnerability on Mercury MAC1200R devices allows attackers to read arbitrary files via a web-static/ URL.

Detection & IOCs extracted from sources · hover to see the quote

url http://60.251.151.2:8888/web-static/↗

url http://222.215.15.70:8888/web-static/↗

ip 60.251.151.2↗

ip 222.215.15.70↗

port 8888↗

path /web-static/↗

• → Monitor HTTP requests containing the path prefix '/web-static/' on port 8888, which is the traversal vector on Mercury MAC1200R devices. ↗
• → Attackers use the search dork '"MAC1200R" && port="8888"' to discover exposed devices; look for inbound connections to port 8888 from scanning infrastructure. ↗

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-22