CVE-2025-62772

LOW

Mercku M6a <2.1.0 - Info Disclosure

Title source: llm
STIX 2.1

Description

On Mercku M6a devices through 2.1.0, session tokens remain valid for at least months in some cases.

References (2)

Scores

CVSS v3 3.1
EPSS 0.0001
EPSS Percentile 2.9%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-305
Status published
Products (1)
Mercku/M6a < 2.1.0
Published Oct 22, 2025
Tracked Since Feb 18, 2026