Solax Power Pocket Wifi+4gm
3 CVEs affecting Solax Power Pocket Wifi+4gm. Latest disclosed: 2026-02-12. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-15573 | Critical | 9.4 | 2026-02-12 | The affected devices do not validate the server certificate when connecting to the SolaX Cloud MQTTS server hosted in the Alibaba Cloud (mqtt001.solaxcloud.com… |
CVE-2025-15574 | Medium | 6.5 | 2026-02-12 | When connecting to the Solax Cloud MQTT server the username is the "registration number", which is the 10 character string printed on the SolaX Power Pocket de… |
CVE-2025-15575 | Medium | 5.3 | 2026-02-12 | The firmware update functionality does not verify the authenticity of the supplied firmware update files. This allows attackers to flash malicious firmware upd… |