Advisories · Technology
Mercku M6a.
Every CVE that names Mercku M6a among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.0 High
Mercku M6a devices through 2.1.0 allow root TELNET logins via the web admin password.
- Mercku M6a
- CWE-669
- CVSS 3.1 Low
Mercku M6a: On Mercku M6a devices through 2.1.0, the authentication system uses predictable session…
- Mercku M6a
- CWE-331
- CVSS 2.4 Low
Mercku M6a: Mercku M6a devices through 2.1.0 allow TELNET sessions via a router.telnet.enabled.update…
- Mercku M6a
- CWE-912
- CVSS 3.1 Low
On Mercku M6a devices through 2.1.0, session tokens remain valid for at least months in some cases.
- Mercku M6a
- CWE-305
- CVSS 7.5 High
Cross-site request forgery in Mercku M6a
- Mercku M6a
- Cross-site request forgery (CSRF)