TI-2025-38958 CVE-2025-62775 · GHSA-ww5c-h42x-mc5x
Mercku M6a devices through 2.1.0 allow root TELNET logins via the web admin password.
Priority HIGH 70
Mercku M6a devices through 2.1.0 allow root TELNET logins via the web admin password.
Mercku
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Mercku records in CISA KEVNo Mercku vulnerabilities are listed in CISA KEV.
Records
5 records
TI-2025-38954 CVE-2025-62771 · GHSA-j979-3w8f-32rw
Mercku M6a devices through 2.1.0 allow password changes via intranet CSRF attacks.
Priority HIGH 68
Mercku M6a devices through 2.1.0 allow password changes via intranet CSRF attacks.
TI-2025-38957 CVE-2025-62774 · GHSA-7r3h-69g8-3vqv
On Mercku M6a devices through 2.1.0, the authentication system uses predictable session tokens based on timestamps.
Priority MEDIUM 48
On Mercku M6a devices through 2.1.0, the authentication system uses predictable session tokens based on timestamps.
TI-2025-38955 CVE-2025-62772 · GHSA-h5x7-xvx7-3c6r
On Mercku M6a devices through 2.1.0, session tokens remain valid for at least months in some cases.
Priority MEDIUM 48
On Mercku M6a devices through 2.1.0, session tokens remain valid for at least months in some cases.
TI-2025-38956 CVE-2025-62773 · GHSA-55w5-976h-wfmc
Mercku M6a devices through 2.1.0 allow TELNET sessions via a router.telnet.enabled.update request by an administrator.
Priority MEDIUM 46
Mercku M6a devices through 2.1.0 allow TELNET sessions via a router.telnet.enabled.update request by an administrator.