PT-2025-43016 · Unknown · Mercku M6A

Published 2025-10-22 · Updated 2025-10-22 · CVE-2025-62773

Positive Technologies (AI Summary)

CVSS v3.1

2.4

Low

Base vector

AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Mercku M6a versions through 2.1.0

Description Mercku M6a devices through version 2.1.0 permit TELNET sessions through a router.telnet.enabled.update request initiated by an administrator. This allows unauthorized access to the device via the TELNET protocol.

Recommendations Update devices to a version later than 2.1.0.

Fix

Hidden Functionality

Weakness Enumeration

CWE-912

Related Identifiers

CVE-2025-62773

Affected Products

Mercku M6A

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-62773 · Security Note
• https://t.me/cveNotify/139804 · Telegram Post
• https://twitter.com/CVEnew/status/1980842238918742111 · Twitter Post
• https://seclists.org/fulldisclosure/2025/Oct/10 · Note
• https://t.me/CVEtracker/35451 · Telegram Post
• https://blog.nullvoid.me/posts/mercku-exploits · Note