CVE-2025-15574

The SolaX Power Pocket WiFi models are vulnerable to insecure credential generation during connection to the Solax Cloud MQTT server . The system uses a 10-character registration number (printed on the device or QR code) as the username, while the password is derived from this same number using a...

SolaX Power Pocket 安全漏洞

SolaX Power Pocket is a monitoring data collection tool developed by SolaX Energy in China. There is a security vulnerability in SolaX Power Pocket. This vulnerability arises when the password is derived from the registration number using a proprietary XOR/transpose algorithm during connection to...

SolaX Power Pocket 安全漏洞

SolaX Power Pocket is a monitoring data collection tool developed by SolaX Energy in China. There is a security vulnerability in SolaX Power Pocket, which stems from the fact that the firmware update function does not verify the authenticity of the provided firmware update files. This vulnerabili...