PT-2025-43018 · Unknown · Mercku M6A

Published 2025-10-22 · Updated 2025-10-22 · CVE-2025-62775

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Mercku M6a versions through 2.1.0

Description Mercku M6a devices versions through 2.1.0 permit root TELNET logins using the web administration password. This allows unauthorized access to the system with elevated privileges.

Recommendations Update Mercku M6a devices to a version later than 2.1.0.

Fix

Weakness Enumeration

CWE-669

Related Identifiers

CVE-2025-62775

Affected Products

Mercku M6A

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-62775 · Security Note
• https://t.me/CVEtracker/35453 · Telegram Post
• https://twitter.com/CVEnew/status/1980842240743186839 · Twitter Post
• https://t.me/cveNotify/139806 · Telegram Post
• https://seclists.org/fulldisclosure/2025/Oct/10 · Note
• https://blog.nullvoid.me/posts/mercku-exploits · Note