Approved changes feed: RSS · Atom

cpe:2.3:o:mersive:solstice_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorMersive (bbccda6f-d148-50ff-bac3-7c13aa82d2d0)
ProductSolstice Firmware (de4a4eeb-54d6-52c4-830f-ab9cf19b6b57)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-35587 vulnerable 2026-06-08 05:25:01.413666 Details available
In Solstice Pod before 3.0.3, the firmware can easily be decompiled/disassembled. The decompiled/disassembled files contain non-obfuscated code. NOTE: it is unclear whether lack of obfuscation is directly associated with a negative impact, or instead only facilitates an attack technique
Published: 2020-12-23T15:19:28.000Z
Updated: 2024-08-04T17:09:14.164Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12945 vulnerable 2026-06-08 05:08:48.089825 Details available
Insufficient validation of user-supplied input for the Solstice Pod before 2.8.4 networking configuration enables authenticated attackers to execute arbitrary commands as root.
Published: 2019-11-27T15:54:59.000Z
Updated: 2024-08-05T18:51:07.330Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.