Skip to content
OpenAdvisories

Vendor

SolaX Power

7 known vulnerabilities.

Products

SolaX Cloud 4 Pocket WiFi 3.0 3 Pocket WiFi+LAN 3 Pocket WiFi+4GM 3 Pocket WiFi+LAN 2.0 3 Pocket WiFi 4.0 3
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-15574

    Insecure Credential Generation for Solax Power Pocket WiFi models MQTT Cloud Connection

    When connecting to the Solax Cloud MQTT server the username is the "registration number", which is the 10 character string printed on the SolaX Power Pocket device / the QR code on the device. The password is derived from the "registration number" using a pro…

    SolaX Power Pocket WiFi 3.0 Pocket WiFi+4GM Pocket WiFi 4.0
  • Medium 5.3
    CVE-2025-15575

    Missing Firmware Authenticity Checks in Solax Power Pocket WiFi models

    The firmware update functionality does not verify the authenticity of the supplied firmware update files. This allows attackers to flash malicious firmware update files on the device. Initial analysis of the firmware update functionality does not show any cry…

    SolaX Power Pocket WiFi+LAN Pocket WiFi+LAN 2.0 Pocket WiFi 3.0
  • Medium 6.3
    CVE-2025-36757

    Bypass of administrator login screen in SolaX Cloud

    It is possible to bypass the administrator login screen on SolaX Cloud. An attacker could use parameter tampering to bypass the login screen and gain limited access to the system.

    SolaX Power SolaX Cloud
  • Medium 6.3
    CVE-2025-36758

    Bypass of bruteforce protection in SolaX Cloud

    It is possible to bypass the clipping level of authentication attempts in SolaX Cloud through the use of the 'Forgot Password' functionality as an oracle.

    SolaX Power SolaX Cloud
  • Medium 5.8
    CVE-2025-36756

    Device Takeover vulnerability in SolaX Cloud

    A problem with missing authorization on SolaX Cloud platform allows taking over any SolaX solarpanel inverter of which the serial number is known.

    SolaX Power SolaX Cloud