CVE-2025-36757
Bypass of administrator login screen in SolaX Cloud
- State
- Published
- Severity
- 6.3 Medium
- Published
- Sep 10, 2025
- Updated
- Sep 10, 2025
- Reserved
- Apr 15, 2025
Description
It is possible to bypass the administrator login screen on SolaX Cloud. An attacker could use parameter tampering to bypass the login screen and gain limited access to the system.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.3 Medium | CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N | DIVD |
Weaknesses
- CWE-306 Missing Authentication for Critical Function
Affected Products
| Product | Versions |
|---|---|
SolaX CloudSolaX Power |
|
References
- https://csirt.divd.nl/CVE-2025-36757third-party-advisory
- https://csirt.divd.nl/DIVD-2025-00015third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.