VULNERABILITY INTELLIGENCE

CVE-2020-35585

CVSS score7.5 HIGH

EPSS probability1.37%

CISA KEVNot currently listed

Published2020-12-23

Last modified2026-06-17

Description

In Solstice Pod before 3.3.0 (or Open4.3), the screen key can be enumerated using brute-force attacks via the /lookin/info Solstice Open Control API because there are only 1.7 million possibilities.