PT-2025-43017 · Mercku · Mercku M6A

Published 2025-10-22 · Updated 2025-10-22 · CVE-2025-62774

Positive Technologies (AI Summary)

CVSS v3.1

3.1

Low

Base vector

AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mercku M6a versions through 2.1.0

Description The authentication system on Mercku M6a devices generates predictable session tokens based on timestamps, potentially allowing unauthorized access. The affected devices are those running versions through 2.1.0.

Recommendations Update Mercku M6a devices to a version newer than 2.1.0.

Fix

Weakness Enumeration

CWE-331

Related Identifiers

CVE-2025-62774

Affected Products

Mercku M6A

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-62774 · Security Note
• https://seclists.org/fulldisclosure/2025/Oct/10 · Note
• https://twitter.com/VulmonFeeds/status/1980859745578717612 · Twitter Post
• https://t.me/CVEtracker/35452 · Telegram Post
• https://t.me/cveNotify/139805 · Telegram Post
• https://blog.nullvoid.me/posts/mercku-exploits · Note
• https://twitter.com/CVEnew/status/1980842239770185844 · Twitter Post