SecuriTricks - CVE-2025-66573

Description

Solstice Pod API (version 5.5, 6.2) contains an unauthenticated API endpoint (`/api/config`) that exposes sensitive information such as the session key, server version, product details, and display name. Unauthorized users can extract live session information by accessing this endpoint without authentication.

Product(s) Impacted

Vendor	Product	Versions
Mersive	Solstice Pod Firmware Solstice Pod	5.6, 6.2 -

Weaknesses

Common security weaknesses mapped to this vulnerability.

CWE-319

Cleartext Transmission of Sensitive Information

The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

*CPE(s)

Affected systems and software identified for this CVE.

Type	Vendor	Product	Version	Update	Edition	Language	Software Edition	Target Software	Target Hardware	Other Information
o	mersive	solstice_pod_firmware	5.6	/	/	/	/	/	/	/
o	mersive	solstice_pod_firmware	6.2	/	/	/	/	/	/	/
h	mersive	solstice_pod	-	/	/	/	/	/	/	/

References

https://documentation.mersive.com/en/solstice/about-solstice.html

https://www.exploit-db.com/exploits/52104

https://www.mersive.com/

https://www.vulncheck.com/advisories/solstice-pod-api-session-key-extraction-via-api-endpoint

https://www.exploit-db.com/exploits/52104

CVSS Score

6.9 / 10

CVSS Data - 4.0

Attack Vector: NETWORK
Attack Complexity: LOW
Attack Requirements: NONE
Privileges Required: NONE
User Interaction: NONE
Scope:
Confidentiality Impact: LOW
Integrity Impact: NONE
Availability Impact: NONE
Exploit Maturity: NOT_DEFINED

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

View Vector String

Timeline

Published: Dec. 4, 2025, 9:16 p.m.
Last Modified: Dec. 23, 2025, 12:09 a.m.

Status : Analyzed

CVE has had analysis completed and all data associations made.

More info

Source

disclosure@vulncheck.com

CVE-2025-66573