CVE-2025-15573 - Vulnerability Analysis

Overview

SolaX devices contain a man-in-the-middle vulnerability caused by lack of server certificate validation when connecting to the SolaX Cloud MQTTS server, letting attackers issue arbitrary commands, exploit requires network position to intercept traffic.

Severity & Score

Impact

Attackers can intercept and manipulate device commands, potentially controlling devices remotely and causing unauthorized actions.

Mitigation

Update to a version that validates server certificates or apply patches to enforce certificate validation.

References

• https://r.sec-consult.com/solax

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Feb 12, 2026

🔴 CVE-2025-15573 - Critical (9.4) The affected devices do not validate the server certificate when connecting to the SolaX Cloud MQTTS server hosted in the Alibaba Cloud (mqtt001.solaxcloud.com, TCP 8883). This allows attackers in a man-in-the-middle position to act as the legitim... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-15573/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner