Description
It is possible to bypass the clipping level of authentication attempts in SolaX Cloud through the use of the 'Forgot Password' functionality as an oracle.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SolaX Power | SolaX Cloud | before 27-06-2025 | — |
References
- https://csirt.divd.nl/CVE-2025-36758 third-party-advisory
- https://csirt.divd.nl/DIVD-2025-00015 third-party-advisory