CVE-2023-35836

An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. An attacker within RF range can obtain a cleartext copy of the network configuration of the device, including the Wi-Fi PSK, during device setup and reconfiguration. Upon success, the attacker is able to further infiltrate the target's Wi-Fi networks.

• CWE-863

• https://www.solaxpower.com/downloads/Not Applicable
• https://www.solaxpower.com/help/upgrading-the-pocket-wifi-firmware/Product
• https://yougottahackthat.com/blog/Third Party Advisory
• https://yougottahackthat.com/blog/1370/solax-inverters-pocket-wifi-using-poor-authenticationThird Party Advisory
• https://www.solaxpower.com/downloads/Not Applicable
• https://www.solaxpower.com/help/upgrading-the-pocket-wifi-firmware/Product
• https://yougottahackthat.com/blog/Third Party Advisory
• https://yougottahackthat.com/blog/1370/solax-inverters-pocket-wifi-using-poor-authenticationThird Party Advisory

Published

Jan 23, 2024

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-35827An issue was discovered in the Linux kernel through 6.3.8. A…7
• CVE-2023-35828An issue was discovered in the Linux kernel before 6.3.2. A …7
• CVE-2023-35829An issue was discovered in the Linux kernel before 6.3.2. A …7
• CVE-2023-35830STW (aka Sensor-Technik Wiedemann) TCG-4 Connectivity Module…9.8
• CVE-2023-35833An issue was discovered in YSoft SAFEQ 6 Server before 6.0.8…6.5
• CVE-2023-35835An issue was discovered in SolaX Pocket WiFi 3 through 3.001…9.8
• CVE-2023-35837An issue was discovered in SolaX Pocket WiFi 3 through 3.001…9.8
• CVE-2023-35838The WireGuard client 0.5.3 on Windows insecurely configures …5.7
• CVE-2023-35839A bypass in the component sofa-hessian of Solon before v2.3.…9.8
• CVE-2023-3584Mattermost fails to properly check the authorization of POST…3.1
• CVE-2023-35840_joinPath in elFinderVolumeLocalFileSystem.class.php in elFi…6.5
• CVE-2023-35841Exposed IOCTL with Insufficient Access Control in Phoenix Wi…7.8