← Back

CVE-2025-62772

nvd nist
Published: Oct 22, 2025Modified: Jun 17, 2026Deferred

JSON object

Loading...
3.1
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Exploitability: 1.6 / Impact: 1.4
Source: MITRE (Secondary)

Description

On Mercku M6a devices through 2.1.0, session tokens remain valid for at least months in some cases.

Related CWEs

CWE-305
Authentication Bypass by Primary Weakness
The authentication algorithm is sound, but the implemented mechanism can be bypassed as the result of a separate weakness that is primary to the authentication error.

References (2)

Source: cve@mitre.org
Source: cve@mitre.org

Timeline

No history available yet.