Beveiligingsadvies

CVE-2025-15573

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-02-12 10:39:35

Laatst bijgewerkt 2026-02-12 14:48:08

Toegewezen door SEC-VLab

CVSS-score 9.4

Status PUBLISHED

Beschrijving

The affected devices do not validate the server certificate when connecting to the SolaX Cloud MQTTS server hosted in the Alibaba Cloud (mqtt001.solaxcloud.com, TCP 8883). This allows attackers in a man-in-the-middle position to act as the legitimate MQTT server and issue arbitrary commands to devices.

← Alle CVE's bekijken Bekijk op cve.org ↗