What’s Vulnerable › Vulnerabilities

CVE-2023-35836

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-01-23 · updated 2026-06-17
• Weakness: CWE-863

Description

An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. An attacker within RF range can obtain a cleartext copy of the network configuration of the device, including the Wi-Fi PSK, during device setup and reconfiguration. Upon success, the attacker is able to further infiltrate the target's Wi-Fi networks.

Affected products

• Solax Pocket Wifi 3 Firmware: from 3.0.0 through 3.009.03_20230504

References

• https://www.solaxpower.com/downloads/
• https://www.solaxpower.com/help/upgrading-the-pocket-wifi-firmware/
• https://yougottahackthat.com/blog/
• https://yougottahackthat.com/blog/1370/solax-inverters-pocket-wifi-using-poor-authentication
• https://www.solaxpower.com/downloads/
• https://www.solaxpower.com/help/upgrading-the-pocket-wifi-firmware/
• https://yougottahackthat.com/blog/
• https://yougottahackthat.com/blog/1370/solax-inverters-pocket-wifi-using-poor-authentication

Get alerted when CVE-2023-35836 or the next vulnerability affects your stack