What is the CVSS score of CVE-2025-66573?

CVE-2025-66573 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.1%.

Which versions of Solstice Pod Firmware are affected by CVE-2025-66573?

An unauthenticated API endpoint in Solstice Pod versions 5.5 and 6.2 exposes critical session keys and system configuration data without requiring user credentials, allowing attackers to compromise…

Is there a public PoC exploit available for CVE-2025-66573?

Yes, a public proof-of-concept exploit is available for CVE-2025-66573. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2025-66573?

Within 24 hours: Identify all Solstice Pod instances running versions 5.5 or 6.2 and isolate them from untrusted networks; disable external API access if operationally feasible. Within 7 days: Implement network-level access controls (WAF rules, IP whitelisting) restricting /api/config endpoint access to authorized administrative networks only; rotate all session keys and credentials. Within 30 days: Upgrade to patched versions when available from vendor; conduct session audit logs to identify potential unauthorized access.

Solstice Pod Firmware CVE-2025-66573

EUVD-2025-201276 HIGH

Cleartext Transmission of Sensitive Information (CWE-319)

2025-12-04 disclosure@vulncheck.com

Information Disclosure Solstice Pod Firmware Mersive

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

EUVD ID Assigned

Mar 15, 2026 - 16:35 euvd

EUVD-2025-201276

Analysis Generated

Mar 15, 2026 - 16:35 vuln.today

PoC Detected

Dec 23, 2025 - 00:09 vuln.today

Public exploit code

CVE Published

Dec 04, 2025 - 21:16 nvd

HIGH 7.5

DescriptionCVE.org

Solstice Pod API (version 5.5, 6.2) contains an unauthenticated API endpoint (/api/config) that exposes sensitive information such as the session key, server version, product details, and display name. Unauthorized users can extract live session information by accessing this endpoint without authentication.

Analysis

Technical ContextAI

Information disclosure occurs when an application inadvertently reveals sensitive data to unauthorized actors through error messages, logs, or improper access controls. This vulnerability is classified as Cleartext Transmission of Sensitive Information (CWE-319).