A stack buffer overflow vulnerability exists in the administrative web interface of Mercusys MW302R MW302R(EU)_V1_1.4.10 Build 231023. An attacker with administrative access can trigger a system crash by sending a specially crafted request, resulting in denial of service through control flow manipulation to an arbitrary instruction address. No CVSS score or remediation details are provided. The vulnerability requires authentication and administrative privileges to exploit.

The vulnerability allows an authenticated administrator to cause a denial of service by crashing the device through a buffer overflow in the web interface. This disrupts normal device operation but does not indicate privilege escalation or remote unauthenticated exploitation based on the available data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict administrative access to trusted personnel only and monitor for unusual administrative activity. No official fix or temporary workaround is currently documented.