Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2025-62771

Mercku M6a devices through 2.1.0 allow password changes via intranet CSRF attacks.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Mercku
Products
M6a
CVE-2025-62772

On Mercku M6a devices through 2.1.0, session tokens remain valid for at least months in some cases.

CVSS 3.1 · 3.1 Low EPSS < 1% KEV · Not listed
Vendors
Mercku
Products
M6a
CVE-2025-62773

Mercku M6a devices through 2.1.0 allow TELNET sessions via a router.telnet.enabled.update request by an administrator.

CVSS 3.1 · 2.4 Low EPSS < 1% KEV · Not listed
Vendors
Mercku
Products
M6a
CVE-2025-62774

On Mercku M6a devices through 2.1.0, the authentication system uses predictable session tokens based on timestamps.

CVSS 3.1 · 3.1 Low EPSS < 1% KEV · Not listed
Vendors
Mercku
Products
M6a
CVE-2025-62775

Mercku M6a devices through 2.1.0 allow root TELNET logins via the web admin password.

CVSS 3.1 · 8 High EPSS < 1% KEV · Not listed
Vendors
Mercku
Products
M6a