Vulnerabilidades de Mersive

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Mersive: 1 registro(s), com severidade, exploração e correções.

Solstice Pod Firmware 1 Solstice Pod API 1

Somente exploradas (KEV) →

CVE-2025-66573 Alta · 7.5 CWE-319 04/12/2025

Solstice Pod API Session Key Extraction via API Endpoint

Solstice Pod API (version 5.5, 6.2) contains an unauthenticated API endpoint (`/api/config`) that exposes sensitive information such as the session key, server version, product details, and display name. Unauthorized users can extract live session information by accessing this endpoint without authentication.