HOMEVULNERABILITIESCVE-2012-4999
MEDIUMPOC

CVE-2012-4999

CWE-20Published: September 19, 2012· Updated: Jun 16, 2026

6.1
CVSS v3.1

Official Description

Mercury MR804 Router 8.0 3.8.1 Build 101220 Rel.53006nB allows remote attackers to cause a denial of service (service hang) via a crafted string in HTTP header fields such as (1) If-Modified-Since, (2) If-None-Match, or (3) If-Unmodified-Since. NOTE: some of these details are obtained from third party information.

NVD Source

Technical Analysis

CVE-2012-4999 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A proof-of-concept (PoC) exploit exists for CVE-2012-4999. While not yet confirmed in active campaigns, the availability of PoC code increases exploitation risk substantially.

CVSS v3.1 Vector Breakdown

Exploitability
Attack VectorAdjacent
Attack ComplexityLow
Privileges Req.
User Interaction
Scope
Impact
ConfidentialityNone
IntegrityNone
AvailabilityC
AV:A/AC:L/Au:N/C:N/I:N/A:C

Affected Vendors & Products

mercurycom2 product(s)
mr804 firmwaremr804
Source: NVD CPE · 2 total CPE entries

Exploit & PoC Resources

POC AVAILABLEProof-of-concept code exists
Exploit-DB
Offensive Security exploit database
GitHub PoC Search
Community PoC repositories
Rapid7 / Metasploit
Metasploit module search
PacketStorm
Security advisories & exploits
NVD Detail
Official NIST entry
MITRE CVE
CVE Program entry
External links open in a new tab. Always verify in a controlled environment before use.

Official Patches & Advisories

ADVISORYhttp://secunia.com/advisories/48079
ADVISORYhttp://secunia.com/advisories/48079

All References (8)

→
http://archives.neohapsis.com/archives/bugtraq/2012-02/0116.htmlExploit
→
http://secunia.com/advisories/48079Vendor Advisory
→
http://www.securityfocus.com/bid/52106Exploit
→
https://exchange.xforce.ibmcloud.com/vulnerabilities/73383
→
http://archives.neohapsis.com/archives/bugtraq/2012-02/0116.htmlExploit
→
http://secunia.com/advisories/48079Vendor Advisory
→
http://www.securityfocus.com/bid/52106Exploit
→
https://exchange.xforce.ibmcloud.com/vulnerabilities/73383

Quick Facts

CVE IDCVE-2012-4999
CVSS Score6.1 / 10
SeverityMEDIUM
WeaknessCWE-20
CISA KEVNo
ExploitPOC
Affected1 vendor(s)
PublishedSep 19, 2012

Related CVEs (CWE-20)

CVE-2008-4428
10.0
CVE-2008-5220
10.0
CVE-2021-23279
10.0
CVE-2013-1710
10.0
CVE-2008-6555
10.0
CVE-2008-4397
10.0

Recommended Actions

  • →Apply vendor patches immediately
  • →Monitor CVE-2012-4999 in threat intel feeds
  • →Review IDS/IPS signatures for exploitation attempts
Data sourced from NVD (NIST), CISA KEV, and EPSS (FIRST). Analysis generated by CTIWatch. CVE data is provided under the NVD usage policy.
← All Vulnerabilities·Search for CVE-2012-4999·NVD