CVE-2020-35584

5.9 mediumEPSS 0.8%

Medium (5.9) in mersive solstice pod firmware. EPSS 0.8% chance of exploitation in the next 30 days.

In Solstice Pod before 3.0.3, the web services allow users to connect to them over unencrypted channels via the Browser Look-in feature. An attacker suitably positioned to view a legitimate user's network traffic could record and monitor their interactions with the web services and obtain any information the user supplies, including Administrator passwords and screen keys.

Severity

CVSS 3.1

5.9 medium

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
CWE: CWE-319
Published: 2020-12-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mersive:solstice_pod_firmware

References

https://documentation.mersive.com/content/pages/release-notes.htm
https://github.com/aress31/solstice-pod-cves
https://www.mersive.com/uk/products/solstice/
https://documentation.mersive.com/content/pages/release-notes.htm
https://github.com/aress31/solstice-pod-cves

Check your stack JSON