CVE-2025-36756 Device Takeover vulnerability in SolaX Cloud

A problem with missing authorization on SolaX Cloud platform allows taking over any SolaX solarpanel inverter of which the serial number is known...

CVE-2025-36756

The CVE-2025-36756 entry describes a missing-authorization vulnerability in the SolaX Cloud platform that could allow takeover of a known-serial-number SolaX solar inverter. Affected component is the SolaX Cloud platform beneath the inverter management flow; root cause is insufficient access cont...

CVE-2025-36756 Device Takeover vulnerability in SolaX Cloud

A problem with missing authorization on SolaX Cloud platform allows taking over any SolaX solarpanel inverter of which the serial number is known...

PT-2025-37029

Name of the Vulnerable Software and Affected Versions: SolaX Cloud affected versions not specified Description: It is possible to bypass the administrator login screen. An attacker could use parameter tampering to bypass the login screen and gain limited access to the system. Recommendations: At...

SolaX Cloud 安全漏洞

SolaX Cloud is a photovoltaic monitoring and management platform from the Chinese company SolaX. A security vulnerability exists in SolaX Cloud that stems from a lack of authorization and could lead to the takeover of a solar inverter...

SolaX Cloud 安全漏洞

SolaX Cloud is a PV monitoring and management platform from SolaX China. A security vulnerability exists in SolaX Cloud that stems from an administrator login screen bypass that could result in limited system access...

PT-2025-37028

Name of the Vulnerable Software and Affected Versions: SolaX Cloud platform affected versions not specified Description: A missing authorization issue exists on the SolaX Cloud platform. This allows unauthorized access and potential takeover of SolaX solar panel inverters when the serial number i...

PT-2025-37031

Name of the Vulnerable Software and Affected Versions: SolaX Cloud versions prior to 27-06-2025 Description: SolaX Cloud leaks sensitive information, such as user email addresses and phone numbers, by suggesting similar user accounts when user names are provided. This information disclosure poses...

SolaX Cloud 安全漏洞

SolaX Cloud is a photovoltaic monitoring and management platform from SolaX China. A security vulnerability exists in SolaX Cloud, which stems from the username suggestion feature leaking sensitive information...

SolaX Cloud 安全漏洞

SolaX Cloud is a PV monitoring and management platform from SolaX China. A security vulnerability exists in SolaX Cloud that stems from a bypass of the Forgot Password feature, which could lead to an authentication attempt limit bypass...

PT-2025-37030

Name of the Vulnerable Software and Affected Versions: SolaX Cloud affected versions not specified Description: It is possible to bypass the clipping level of authentication attempts through the 'Forgot Password' functionality, acting as an oracle. Recommendations: At the moment, there is no...

CVE-2023-35835

An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. The device provides a WiFi access point for initial configuration. The WiFi network provided has no network authentication such as an encryption key and persists permanently, including after enrollment and setup is complete. The WiF...

CVE-2023-35836

An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. An attacker within RF range can obtain a cleartext copy of the network configuration of the device, including the Wi-Fi PSK, during device setup and reconfiguration. Upon success, the attacker is able to further infiltrate the...

CVE-2023-35836

An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. An attacker within RF range can obtain a cleartext copy of the network configuration of the device, including the Wi-Fi PSK, during device setup and reconfiguration. Upon success, the attacker is able to further infiltrate the...

CVE-2023-35836

An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. An attacker within RF range can obtain a cleartext copy of the network configuration of the device, including the Wi-Fi PSK, during device setup and reconfiguration. Upon success, the attacker is able to further infiltrate the...

CVE-2023-35837

An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. Authentication for web interface is completed via an unauthenticated WiFi AP. The administrative password for the web interface has a default password, equal to the registration ID of the device. This same registration ID is used as...

CVE-2023-35837

An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. Authentication for web interface is completed via an unauthenticated WiFi AP. The administrative password for the web interface has a default password, equal to the registration ID of the device. This same registration ID is used as...

CVE-2023-35835

An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. The device provides a WiFi access point for initial configuration. The WiFi network provided has no network authentication such as an encryption key and persists permanently, including after enrollment and setup is complete. The WiF...

CVE-2023-35835

An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. The device provides a WiFi access point for initial configuration. The WiFi network provided has no network authentication such as an encryption key and persists permanently, including after enrollment and setup is complete. The WiF...

Default credentials

An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. Authentication for web interface is completed via an unauthenticated WiFi AP. The administrative password for the web interface has a default password, equal to the registration ID of the device. This same registration ID is used as...