« Volver al listado

CVE-2025-15573

Estado: AplazadaCrítica (9.4)—

The affected devices do not validate the server certificate when connecting to the SolaX Cloud MQTTS server hosted in the Alibaba Cloud (mqtt001.solaxcloud.com, TCP 8883). This allows attackers in a man-in-the-middle position to act as the legitimate MQTT server and issue arbitrary commands to devices.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

Sin validación de certificado (CWE-295) en conexión MQTTS, atacante en la red (MITM) se personifica como servidor legítimo emitiendo comandos a dispositivos. AV:N permite explotación remota; T1557 es el vector de entrada. Comandos arbitrarios (impacto primario), control de cuentas de dispositivo (se

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Disable or Remove Feature or ProgramUser TrainingRestrict Web-Based ContentPrivileged Account ManagementNetwork SegmentationNetwork Intrusion Prevention

Tecnologías afectadas (2)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Alibabacloud — Alibaba CloudAISolax — Solax CloudAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-15573",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-15573",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-02-12T14:47:36.281880Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 9.4,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "LOW",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.5,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "551230f0-3615-47bd-b7cc-93e92e730bbf",
      "affectedData": [
        {
          "vendor": "SolaX Power",
          "product": "Pocket WiFi 3.0",
          "versions": [
            {
              "status": "affected",
              "version": "<3.022.03"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SolaX Power",
          "product": "Pocket WiFi+LAN",
          "versions": [
            {
              "status": "affected",
              "version": "<1.009.02"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SolaX Power",
          "product": "Pocket WiFi+4GM",
          "versions": [
            {
              "status": "affected",
              "version": "<1.005.05"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SolaX Power",
          "product": "Pocket WiFi+LAN 2.0",
          "versions": [
            {
              "status": "affected",
              "version": "<006.06"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SolaX Power",
          "product": "Pocket WiFi 4.0",
          "versions": [
            {
              "status": "affected",
              "version": "<003.03"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2026-02-12T11:15:47.780",
  "references": [
    {
      "url": "https://r.sec-consult.com/solax",
      "source": "551230f0-3615-47bd-b7cc-93e92e730bbf"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "551230f0-3615-47bd-b7cc-93e92e730bbf",
      "description": [
        {
          "lang": "en",
          "value": "CWE-295"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The affected devices do not validate the server certificate when connecting to the SolaX Cloud MQTTS server hosted in the Alibaba Cloud (mqtt001.solaxcloud.com, TCP 8883). This allows attackers in a man-in-the-middle position to act as the legitimate MQTT server and issue arbitrary commands to devices."
    },
    {
      "lang": "es",
      "value": "Los dispositivos afectados no validan el certificado del servidor al conectarse al servidor MQTTS de SolaX Cloud alojado en Alibaba Cloud (mqtt001.solaxcloud.com, TCP 8883). Esto permite a los atacantes en una posición de man-in-the-middle actuar como el servidor MQTT legítimo y emitir comandos arbitrarios a los dispositivos."
    }
  ],
  "lastModified": "2026-06-17T08:38:03.397",
  "sourceIdentifier": "551230f0-3615-47bd-b7cc-93e92e730bbf"
}