Mersive Solstice Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Mersive Solstice Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2017-12945 — CVSS 8.8 (high): Insufficient validation of user-supplied input for the Solstice Pod before 2.8.4 networking configuration enables authenticated attackers…
• CVE-2020-35587 — CVSS 7.5 (high): In Solstice Pod before 3.0.3, the firmware can easily be decompiled/disassembled. The decompiled/disassembled files contain non-obfuscated…