CVE-2025-15573

CRITICAL

The affected devices do not validate the server certificate when connecting to the SolaX Cloud MQTTS server hosted in the Alibaba Cloud (mqtt001.solaxcloud.com, TCP 8883). This allows attackers in ...

Affects 0 products across 3 vendors.

CVSS 3.19.4
EPSS0.2%
Percentile13th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, no authentication required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact, full integrity impact.
CWE Weakness Definitions
CWE-295: CWE-295
Related Attack Patterns (CAPEC)
CAPEC-459 Creating a Rogue Certification Authority Certificate
via CWE-295
CAPEC-475 Signature Spoofing by Improper Validation
via CWE-295

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

The affected devices are vulnerable to man-in-the-middle attacks due to a lack of server certificate validation when connecting to the SolaX Cloud MQTTS server. This vulnerability allows attackers to issue arbitrary commands to the devices.

BSID: BS-2026-GLOBAL-234946-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2025-15573?
The affected devices are vulnerable to man-in-the-middle attacks due to a lack of server certificate validation when connecting to the SolaX Cloud MQTTS server. This vulnerability allows attackers to issue arbitrary commands to the devices.
What is the CVSS score for CVE-2025-15573?
CVE-2025-15573 has CVSS 9.4 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L. EPSS: 0.2%.
Is CVE-2025-15573 actively exploited?
No confirmed active exploitation of CVE-2025-15573 as of 2026-09-25.
How do I remediate CVE-2025-15573?
Priority: IMMEDIATE.
What systems are affected by CVE-2025-15573?
CVE-2025-15573 affects Alibaba; Cloud; Solax.
Vulnerability Details
CVE IDCVE-2025-15573
BSIDBS-2026-GLOBAL-234946-C BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
Published2026-02-12
Last Modified2026-06-17
ICS Relevance0%
Weakness (CWE)
CWE-295
SourceNVD
Official Description

The affected devices do not validate the server certificate when connecting to the SolaX Cloud MQTTS server hosted in the Alibaba Cloud (mqtt001.solaxcloud.com, TCP 8883). This allows attackers in a man-in-the-middle position to act as the legitimate MQTT server and issue arbitrary commands to devices.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

Attackers can position themselves in a man-in-the-middle position between the affected devices and the SolaX Cloud MQTTS server (mqtt001.solaxcloud.com, TCP 8883). By intercepting the connection, they can act as the legitimate MQTT server and send malicious commands to the devices.

Exploitation Likelihood: HIGH

Affected Products
VendorProductAffected Versions
Alibaba — —
Cloud — —
Solax — —
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 245 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceHIGH
Enriched At2026-05-24
SHA-512 Audit Hash1766ec92e47e51bb64e315971e0d16aa8eb98fcdb4b50c55fb235a8a01c3fd422002e8260706d4eae038f2bdcf1e6a1caf581bcbfbd554d0c4251c231b5dd2a5
Related CVEs affecting Alibaba
CVE-2025-70974 10.0 Fastjson before 1.2.48 mishandles autoType because, when an @type key is in a... CVE-2017-18349 9.8 parseObject in Fastjson before 1.2.25, as used in FastjsonEngine in Pippo 1.1... CVE-2022-25845 9.8 The package com.alibaba:fastjson before 1.2.83 are vulnerable to Deserializat... CVE-2021-29441 9.8 Nacos is a platform designed for dynamic service discovery and configuration ... CVE-2026-16723 9.0 A remote code execution (RCE) vulnerability exists in fastjson 1.2.68 through...
View all Alibaba CVEs →

Critical Severity - Know Your Exposure

A CVSS 9.4 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Create a free account →