Description
Mercku M6a devices through 2.1.0 allow password changes via intranet CSRF attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Mercku | M6a | ≤ 2.1.0 | — |
High · 7.5
CVE-2025-62771
EUVD-2025-35316GHSA-j979-3w8f-32rw
Mercku M6a devices through 2.1.0 allow password changes via intranet CSRF attacks.
Published Oct 22, 2025 · Updated Oct 22, 2025 · Assigned by mitre