CVE-2026-51599

An insufficient input validation vulnerability in the RTSP service of MERCURY MIPC252W v1.0.5 Build 230306 Rel.79931n allows an unauthenticated remote attacker to render an individual TCP connection temporarily unusable via sending an RTSP request with a Content-Length header but no corresponding message body. The affected RTSP parser enters a body-waiting state instead of rejecting the malformed request, causing all subsequent data on the connection to be silently consumed as body content until a server-side timeout closes the connection.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/kkkk2222874/cve_ID_report/blob/main/MERCURY_MIPC252W/MERCURY_MIPC252W_7th/README.md
https://github.com/kkkk2222874/cve_ID_report/blob/main/MERCURY_MIPC252W/MERCURY_MIPC252W_7th/README.md

Configurations

No configuration.

History

25 Oct 2026, 17:10

Type	Values Removed	Values Added
Summary		(es) Una vulnerabilidad de validación de entrada insuficiente en el servicio RTSP de MERCURY MIPC252W v1.0.5 Build 230306 Rel.79931n permite a un atacante remoto no autenticado dejar una conexión TCP individual temporalmente inutilizable mediante el envío de una solicitud RTSP con una cabecera Content-Length pero sin un cuerpo de mensaje correspondiente. El analizador RTSP afectado entra en un estado de espera de cuerpo en lugar de rechazar la solicitud malformada, lo que provoca que todos los datos subsiguientes en la conexión sean consumidos silenciosamente como contenido del cuerpo hasta que un tiempo de espera del servidor cierre la conexión.

Information

Published : 2026-07-09 17:16

Updated : 2026-10-25 17:10

NVD link : CVE-2026-51599

Mitre link : CVE-2026-51599

CVE.ORG link : CVE-2026-51599

JSON object : View

Products Affected

No product.

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2026-51599", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-51599", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-07-10T17:25:30.505749Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2026-07-09T17:16:59.577", "references": [{"url": "https://github.com/kkkk2222874/cve_ID_report/blob/main/MERCURY_MIPC252W/MERCURY_MIPC252W_7th/README.md", "source": "cve@mitre.org"}, {"url": "https://github.com/kkkk2222874/cve_ID_report/blob/main/MERCURY_MIPC252W/MERCURY_MIPC252W_7th/README.md", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "An insufficient input validation vulnerability in the RTSP service of MERCURY MIPC252W v1.0.5 Build 230306 Rel.79931n allows an unauthenticated remote attacker to render an individual TCP connection temporarily unusable via sending an RTSP request with a Content-Length header but no corresponding message body. The affected RTSP parser enters a body-waiting state instead of rejecting the malformed request, causing all subsequent data on the connection to be silently consumed as body content until a server-side timeout closes the connection."}, {"lang": "es", "value": "Una vulnerabilidad de validaci\u00f3n de entrada insuficiente en el servicio RTSP de MERCURY MIPC252W v1.0.5 Build 230306 Rel.79931n permite a un atacante remoto no autenticado dejar una conexi\u00f3n TCP individual temporalmente inutilizable mediante el env\u00edo de una solicitud RTSP con una cabecera Content-Length pero sin un cuerpo de mensaje correspondiente. El analizador RTSP afectado entra en un estado de espera de cuerpo en lugar de rechazar la solicitud malformada, lo que provoca que todos los datos subsiguientes en la conexi\u00f3n sean consumidos silenciosamente como contenido del cuerpo hasta que un tiempo de espera del servidor cierre la conexi\u00f3n."}], "lastModified": "2026-10-25T17:10:00.197", "sourceIdentifier": "cve@mitre.org"}