CVE-2023-35836: Solax Pocket Wifi 3 Firmware

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. An attacker within RF range can obtain a cleartext copy of the network configuration of the device, including the Wi-Fi PSK, during device setup and reconfiguration. Upon success, the attacker is able to further infiltrate the target's Wi-Fi networks.

Affected products

• Solax Pocket Wifi 3 Firmware: from 3.0.0, up to and including 3.009.03_20230504

Published 2024-01-23. Last modified 2026-06-17.