MEDIUM🇬🇧 English

CVE-2026-27753

CVSS 6.9v4.0pub. 2026-02-27upd. 2026-03-03

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain an authentication bypass vulnerability that allows remote attackers to perform unlimited login attempts against the management interface. Attackers can conduct online password guessing attacks without account lockout or rate limiting restrictions to gain unauthorized access to the device management interface.

oryginał EN
CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • Sodola Network Sl902 Swtgw124as

    HW
    Sodola-Network
    wszystkie wersje

  • Sodola Network Sl902 Swtgw124as Firmware

    OS
    Sodola-Network
    ≤ 200.1.20
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
Auth Bypass
CWE
Referencje

Powiązane podatności

CVE-2026-27755CRITICAL9.3PL ✓ten sam produkt

SODOLA SL902-SWTGW124AS — przewidywalne identyfikatory sesji umożliwiają Auth Bypass

CVE-2026-27751CRITICAL9.3PL ✓ten sam produkt

Domyślne dane uwierzytelniające w firmware Sodola SL902-SWTGW124AS

CVE-2026-27757HIGH7.1ten sam produkt

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain an authentication vulnerability that allows...

CVE-2026-27752HIGH8.2ten sam produkt

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 transmit authentication credentials over unencrypte...

CVE-2026-27754MEDIUM6.9ten sam produkt

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 use the cryptographically broken MD5 hash function ...