CVE-2017-12945: Mersive Solstice Firmware

High severity, CVSS 8.8. EPSS: 17.5% chance of exploitation in the next 30 days.

Insufficient validation of user-supplied input for the Solstice Pod before 2.8.4 networking configuration enables authenticated attackers to execute arbitrary commands as root.

Affected products

  • Mersive Solstice Firmware: before 2.8.4 (fixed in 2.8.4)

Published 2019-11-27. Last modified 2026-06-17.