CVE-2025-66573 - CVE House
Back to Database
Status published Medium CVE-2025-66573

Solstice Pod API Session Key Extraction via API Endpoint

Vulnerability Description

Solstice Pod API (version 5.5, 6.2) contains an unauthenticated API endpoint (`/api/config`) that exposes sensitive information such as the session key, server version, product details, and display name. Unauthorized users can extract live session information by accessing this endpoint without authentication.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-66573

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • The Baldwin School Ethical Hackers, The Baldwin School

References

More from mersive

View All →
CVE-2020-35587
In Solstice Pod before 3.0.3, the firmware can easily be...
High 7.5
CVE-2020-35586
In Solstice Pod before 3.3.0 (or Open4.3), the Administrator password...
High 7.5
CVE-2020-35585
In Solstice Pod before 3.3.0 (or Open4.3), the screen key...
High 7.5
CVE-2020-35584
In Solstice Pod before 3.0.3, the web services allow users...
Medium 5.9
CVE-2020-27523
Solstice-Pod up to 5.0.2 WEBRTC server mishandles the format-string specifiers...
High 7.5

Affected Vendor

Affected Software

Solstice Pod API
Vulnerable Versions:
5.5, 6.2

Timeline

Official Publish: December 4th, 2025
Last Modified: July 14th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-319

MITRE ATT&CK TTPs

T1040 Network Sniffing
Collection
T1557 Adversary-in-the-Middle
Credential Access
T1552 Unsecured Credentials
Credential Access
T1078 Valid Accounts
Persistence
T1071 Application Layer Protocol
Command and Control