Description
On Mercku M6a devices through 2.1.0, session tokens remain valid for at least months in some cases.
Metrics
CVSS 3.1 3.1/10
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:NWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Mercku | M6a | <= 2.1.0 |
References
Timeline
- Published
- Oct 22, 2025
- Last modified
- Oct 8, 2026
- NVD status
- Deferred