CVE Catalog
CVE-2025-62774
LowCVSS 3.1Exploitation Probability (EPSS)
Low risk0.19%
8th percentile - higher than 8% of all known CVEs
Summary
On Mercku M6a devices through version 2.1.0, the authentication system uses predictable session tokens based on timestamps.
Risk Assessment
An attacker can predict session tokens and hijack user sessions, leading to unauthorized access to the device and data.
Recommendation
It is recommended to update the device firmware to a newer version that uses secure, random session tokens, and to monitor sessions.
Other vulnerabilities in Mercku M6a
See allOriginal NVD description (English source)
On Mercku M6a devices through 2.1.0, the authentication system uses predictable session tokens based on timestamps.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS