CVE-2025-62775CWE-669

CVE-2025-62775

High · published October 22, 2025

CVSS v3.1
8.0
EPSS
0%
Percentile
19.3
In the wild
Unconfirmed
What it is

🚨 Hold onto your Wi-Fi! A high-risk vulnerability in Mercku M6a devices allows root TELNET logins just by using the web admin password! ⚡ Think of your home security: if your front door key is the same as the one everyone uses to enter the kitchen, you’re in trouble! This vulnerability is like giving out a master key that grants access to every room in your house. An attacker could easily gain full control of your device, allowing them to change settings, intercept network traffic, or even use it as a launchpad for further attacks on your network. This could lead to a complete takeover of your home network and data theft — absolutely devastating!

Put simply

Think of your home security: if your front door key is the same as the one everyone uses to enter the kitchen, you’re in trouble! This vulnerability is like giving out a master key that grants access to every room in your house. This vulnerability allows unauthorized root TELNET access through the web admin password, meaning if someone gets that password, they can control your device as if they were you.

What to do

An attacker could easily gain full control of your device, allowing them to change settings, intercept network traffic, or even use it as a launchpad for further attacks on your network. This could lead to a complete takeover of your home network and data theft — absolutely devastating! Patch your Mercku M6a device to version 2.1.1 immediately to close this door to attackers. Additionally, consider disabling TELNET entirely if it's not needed, and change your admin password to something robust and unique. 🛡️ You've got this! Follow these steps, and you'll boost your security status like a pro! 💪✨

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00279 · 19.3th percentile
Weakness
CWE-669 · Incorrect Resource Transfer Between Spheres
Published
2025-10-22T08:16Z
References (2)
EPSS history
Timeline
  • 22 OCT 00:00Z
    Mercku M6a devices through 2.1.0 allow root TELNET logins via the web admin password
    cvelistv5