45 matches found
CVE-2025-62771
Mercku M6a devices through 2.1.0 allow password changes via intranet CSRF attacks...
CVE-2025-62772
On Mercku M6a devices through 2.1.0, session tokens remain valid for at least months in some cases...
CVE-2025-62774
On Mercku M6a devices through 2.1.0, the authentication system uses predictable session tokens based on timestamps...
CVE-2025-62773
Mercku M6a devices through 2.1.0 allow TELNET sessions via a router.telnet.enabled.update request by an administrator...
CVE-2025-62775
Mercku M6a devices through 2.1.0 allow root TELNET logins via the web admin password...
CVE-2025-62774
On Mercku M6a devices through 2.1.0, the authentication system uses predictable session tokens based on timestamps...
CVE-2025-62775
Mercku M6a devices through 2.1.0 allow root TELNET logins via the web admin password...
CVE-2025-62772
On Mercku M6a devices through 2.1.0, session tokens remain valid for at least months in some cases...
CVE-2025-62773
Mercku M6a devices through 2.1.0 allow TELNET sessions via a router.telnet.enabled.update request by an administrator...
CVE-2025-62771
Mercku M6a devices through 2.1.0 allow password changes via intranet CSRF attacks...
CVE-2025-62775
Mercku M6a devices through 2.1.0 allow root TELNET logins via the web admin password...
PT-2025-43016
Name of the Vulnerable Software and Affected Versions Mercku M6a versions through 2.1.0 Description Mercku M6a devices through version 2.1.0 permit TELNET sessions through a router.telnet.enabled.update request initiated by an administrator. This allows unauthorized access to the device via the...
CVE-2025-62775
CVE-2025-62775 affects Mercku M6a devices up to firmware version 2.1.0, where the web admin password can be used to gain root TELNET access. The connected documents consistently describe root access via TELNET enabled by the web admin password, indicating a high-severity impact (per CVSS 3.1 vect...
Mercku M6a 安全漏洞
Mercku M6a is a WiFi router from Mercku USA. A security vulnerability exists in Mercku M6a version 2.1.0 and prior versions, which originates from allowing root login via TELNET using the web administrator password, which could lead to unauthorized access...
CVE-2025-62775: Incorrect Resource Transfer Between Spheres
Mercku M6a devices through 2.1.0 allow root TELNET logins via the web admin password...
CVE-2025-62771: Cross-Site Request Forgery (CSRF)
Mercku M6a devices through 2.1.0 allow password changes via intranet CSRF attacks...
PT-2025-43014
Name of the Vulnerable Software and Affected Versions Mercku M6a versions through 2.1.0 Description Mercku M6a devices versions through 2.1.0 are susceptible to password changes through intranet Cross-Site Request Forgery CSRF attacks. CSRF attacks involve malicious websites or emails tricking a...
PT-2025-43018
Name of the Vulnerable Software and Affected Versions Mercku M6a versions through 2.1.0 Description Mercku M6a devices versions through 2.1.0 permit root TELNET logins using the web administration password. This allows unauthorized access to the system with elevated privileges. Recommendations...
