Mipc252w Firmware vulnerabilities

2 known vulnerabilities in Mipc252w Firmware from Mercurycom. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Mipc252w Firmware: Improper Authentication

  CVE-2026-35903Apr 27, 2026Mercurycom

  MERCURY MIPC252W IP camera 1.0.5 Build 230306 Rel.79931n contains an improper authentication vulnerability in the RTSP service. After successful Digest authentication in an initial DESCRIBE request, the device does not verify the Digest response parameter in s

• 7.5 High severity

  Mipc252w Firmware: NULL Pointer Dereference

  CVE-2026-31256Apr 27, 2026Mercurycom

  A null pointer dereference vulnerability exists in the RTSP service of the MERCURY MIPC252W 1.0.5 Build 230306 Rel.79931n. During the processing of a SETUP request for the path rtsp://<IP>:554/stream1/track2, the device fails to properly validate the Transport