Vulnerabilities in Mercku
5 resultsCVE-2025-62775HIGHMercku M6a devices through 2.1.0 allow root TELNET logins via the web admin password.EPSS 0.3%CVE-2025-62774LOWOn Mercku M6a devices through 2.1.0, the authentication system uses predictable session tokens based on timestamps.EPSS 0.2%CVE-2025-62773LOWMercku M6a devices through 2.1.0 allow TELNET sessions via a router.telnet.enabled.update request by an administrator.EPSS 0.2%CVE-2025-62772LOWOn Mercku M6a devices through 2.1.0, session tokens remain valid for at least months in some cases.EPSS 0.1%CVE-2025-62771HIGHMercku M6a devices through 2.1.0 allow password changes via intranet CSRF attacks.EPSS 0.1%