Vulnerabilidades do Mersive Solstice Pod Firmware

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Mersive Solstice Pod Firmware: 1 registro(s), com versões afetadas e correções.
cpe:2.3:o:mersive:solstice_pod_firmware

CVE-2025-66573 Alta · 7.5 CWE-319 04/12/2025

Solstice Pod API Session Key Extraction via API Endpoint

Solstice Pod API (version 5.5, 6.2) contains an unauthenticated API endpoint (`/api/config`) that exposes sensitive information such as the session key, server version, product details, and display name. Unauthorized users can extract live session information by accessing this endpoint without authentication.