CVE-2025-15574

The SolaX Power Pocket WiFi models are vulnerable to insecure credential generation during connection to the Solax Cloud MQTT server . The system uses a 10-character registration number (printed on the device or QR code) as the username, while the password is derived from this same number using a...