Read the docs
TI-2023-24206 Aliases CVE-2023-45194GHSA-h49v-gcm2-4fm3

Hard-coded credentials in Micro Research Ltd. MR-GM2

Priority LOW 20CWE-798Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
None · Low · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-798.

Summary

Use of default credentials vulnerability in MR-GM2 firmware Ver. 3.00.03 and earlier, and MR-GM3 (-D/-K/-S/-DK/-DKS/-M/-W) firmware Ver. 1.03.45 and earlier allows a network-adjacent unauthenticated attacker to intercept wireless LAN communication, when the affected product performs the communication without changing the pre-shared key from the factory-default configuration.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00256 17th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Micro Research Ltd.MR-GM2firmware Ver. 3.00.03 and earlier—No fix listedCNA
Micro Research Ltd.MR-GM3 (-D/-K/-S/-DK/-DKS/-M/-W)firmware Ver. 1.03.45 and earlier—No fix listedCNA
  • MR-GM2 VendorMicro Research Ltd. Affected firmware Ver. 3.00.03 and earlier Fixed in — No fix listed CNA
  • MR-GM3 (-D/-K/-S/-DK/-DKS/-M/-W) VendorMicro Research Ltd. Affected firmware Ver. 1.03.45 and earlier Fixed in — No fix listed CNA

CPE configurations NVD · 14

CPEVersionsRoleVendor
cpe:2.3:o:mrl:mr-gm3-d_firmware:*:*:*:*:*:*:*:*before 1.04.00VulnerableMrl
cpe:2.3:h:mrl:mr-gm3-d:-:*:*:*:*:*:*:*not specified by NVDRunning onMrl
cpe:2.3:o:mrl:mr-gm3-k_firmware:*:*:*:*:*:*:*:*before 1.04.00VulnerableMrl
cpe:2.3:h:mrl:mr-gm3-k:-:*:*:*:*:*:*:*not specified by NVDRunning onMrl
cpe:2.3:o:mrl:mr-gm3-s_firmware:*:*:*:*:*:*:*:*before 1.04.00VulnerableMrl
cpe:2.3:h:mrl:mr-gm3-s:-:*:*:*:*:*:*:*not specified by NVDRunning onMrl
cpe:2.3:o:mrl:mr-gm3-dks_firmware:*:*:*:*:*:*:*:*before 1.04.00VulnerableMrl
cpe:2.3:h:mrl:mr-gm3-dks:-:*:*:*:*:*:*:*not specified by NVDRunning onMrl
cpe:2.3:o:mrl:mr-gm3-m_firmware:*:*:*:*:*:*:*:*before 1.04.00VulnerableMrl
cpe:2.3:h:mrl:mr-gm3-m:-:*:*:*:*:*:*:*not specified by NVDRunning onMrl
  • cpe:2.3:o:mrl:mr-gm3-d_firmware:*:*:*:*:*:*:*:* Versions before 1.04.00 Vulnerable ·Mrl
  • cpe:2.3:h:mrl:mr-gm3-d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mrl
  • cpe:2.3:o:mrl:mr-gm3-k_firmware:*:*:*:*:*:*:*:* Versions before 1.04.00 Vulnerable ·Mrl
  • cpe:2.3:h:mrl:mr-gm3-k:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mrl
  • cpe:2.3:o:mrl:mr-gm3-s_firmware:*:*:*:*:*:*:*:* Versions before 1.04.00 Vulnerable ·Mrl
  • cpe:2.3:h:mrl:mr-gm3-s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mrl
  • cpe:2.3:o:mrl:mr-gm3-dks_firmware:*:*:*:*:*:*:*:* Versions before 1.04.00 Vulnerable ·Mrl
  • cpe:2.3:h:mrl:mr-gm3-dks:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mrl
  • cpe:2.3:o:mrl:mr-gm3-m_firmware:*:*:*:*:*:*:*:* Versions before 1.04.00 Vulnerable ·Mrl
  • cpe:2.3:h:mrl:mr-gm3-m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mrl
Show 4 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:mrl:mr-gm2_firmware:*:*:*:*:*:*:*:*before 3.01.00VulnerableMrl
cpe:2.3:h:mrl:mr-gm2:-:*:*:*:*:*:*:*not specified by NVDRunning onMrl
cpe:2.3:o:mrl:mr-gm3-w_firmware:*:*:*:*:*:*:*:*before 1.04.00VulnerableMrl
cpe:2.3:h:mrl:mr-gm3-w:-:*:*:*:*:*:*:*not specified by NVDRunning onMrl
  • cpe:2.3:o:mrl:mr-gm2_firmware:*:*:*:*:*:*:*:* Versions before 3.01.00 Vulnerable ·Mrl
  • cpe:2.3:h:mrl:mr-gm2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mrl
  • cpe:2.3:o:mrl:mr-gm3-w_firmware:*:*:*:*:*:*:*:* Versions before 1.04.00 Vulnerable ·Mrl
  • cpe:2.3:h:mrl:mr-gm3-w:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Mrl

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-45194
  2. 2026-10-03 Alias added: GHSA-h49v-gcm2-4fm3

References

Patch 1

Advisory 1

  • TI-2026-22193 Authentication bypass in Micro Research Ltd. MR-GM5L-S1 CVSS 4.0CRITICAL 9.3
  • TI-2026-19711 Hard-coded credentials in Micro Research Ltd. MR-GM5L-S1 CVSS 4.0CRITICAL 9.3
  • TI-2026-16918 Code injection in Micro Research Ltd. MR-GM5L-S1 CVSS 4.0HIGH 8.6

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences