CVE-2020-35587

Published: Dec 23, 2020Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

In Solstice Pod before 3.0.3, the firmware can easily be decompiled/disassembled. The decompiled/disassembled files contain non-obfuscated code. NOTE: it is unclear whether lack of obfuscation is directly associated with a negative impact, or instead only facilitates an attack technique

Affected (1)

Products: Mersive: Solstice Firmware

1 product

Solstice Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mersive Solstice Firmware	Before 3.0.3

Running on/with	Platform Versions
Mersive Solstice	All versions

Related CWEs

Missing Encryption of Sensitive Data

The product does not encrypt sensitive or critical information before storage or transmission.

References (8)

https://attack.mitre.org/techniques/T1444/

Source: cve@mitre.org

Third Party Advisory

https://documentation.mersive.com/content/pages/release-notes.htm

Source: cve@mitre.org

Release NotesVendor Advisory

https://github.com/aress31/solstice-pod-cves

Source: cve@mitre.org

Third Party Advisory

https://www.mersive.com/uk/products/solstice/

Source: cve@mitre.org

ProductVendor Advisory

https://attack.mitre.org/techniques/T1444/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://documentation.mersive.com/content/pages/release-notes.htm

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

https://github.com/aress31/solstice-pod-cves

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.mersive.com/uk/products/solstice/

Source: af854a3a-2127-422b-91ae-364da2661108

ProductVendor Advisory

Timeline

No history available yet.