PT-2025-43015 · Mercku · Mercku M6A

Published 2025-10-22 · Updated 2025-10-22 · CVE-2025-62772

Positive Technologies (AI Summary)

CVSS v3.1

3.1

Low

Base vector

AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Mercku M6a versions through 2.1.0

Description Session tokens on Mercku M6a devices can remain valid for an extended duration, potentially lasting months.

Recommendations Update Mercku M6a devices to a version later than 2.1.0.

Fix

Weakness Enumeration

CWE-305

Related Identifiers

CVE-2025-62772

Affected Products

Mercku M6A

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-62772 · Security Note
• https://t.me/CVEtracker/35450 · Telegram Post
• https://seclists.org/fulldisclosure/2025/Oct/10 · Note
• https://t.me/cveNotify/139803 · Telegram Post
• https://blog.nullvoid.me/posts/mercku-exploits · Note
• https://twitter.com/CVEnew/status/1980842238092476682 · Twitter Post