SecvalisbySYSDEVOPS.EU
CVE Catalog
EnglishPolski

CVE-2025-62773

LowCVSS 2.4
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.17%

6th percentile - higher than 6% of all known CVEs

Summary

Mercku M6a devices through version 2.1.0 allow TELNET sessions via a router.telnet.enabled.update request by an administrator.

Risk Assessment

Allowing TELNET sessions can lead to unauthorized remote access to the device, which could be exploited to take control of the device and network.

Recommendation

It is recommended to update the device firmware to a newer version that disables or secures TELNET, and to restrict administrative access.

Other vulnerabilities in Mercku M6a

See all
Original NVD description (English source)

Mercku M6a devices through 2.1.0 allow TELNET sessions via a router.telnet.enabled.update request by an administrator.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS