CVE-2025-62774

Description (CNA)

On Mercku M6a devices through 2.1.0, the authentication system uses predictable session tokens based on timestamps.

Affected (CNA)

CWE

CWE-331

References

• https://seclists.org/fulldisclosure/2025/Oct/10
• https://blog.nullvoid.me/posts/mercku-exploits/

ADP enrichment