CVE-2020-22724: Mercury MER1200 Firmware

Critical severity, CVSS 9.8. EPSS: 5.6% chance of exploitation in the next 30 days.

A remote command execution vulnerability exists in add_server_service of PPTP_SERVER in Mercury Router MER1200 v1.0.1 and Mercury Router MER1200G v1.0.1.

Affected products

• Mercury MER1200 Firmware: version 1.0.1 only
• Mercury MER1200G Firmware: version 1.0.1 only

Published 2021-10-14. Last modified 2026-06-17.