MEDIUM🇬🇧 English

CVE-2026-27758

CVSS 5.1v4.0pub. 2026-02-27upd. 2026-03-03

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a cross-site request forgery vulnerability in its management interface that allows attackers to induce authenticated users into submitting forged requests. Attackers can craft malicious requests that execute unauthorized configuration or administrative actions with the victim's privileges when the authenticated user visits a malicious webpage.

oryginał EN
CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • Sodola Network Sl902 Swtgw124as

    HW
    Sodola-Network
    wszystkie wersje

  • Sodola Network Sl902 Swtgw124as Firmware

    OS
    Sodola-Network
    ≤ 200.1.20
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2026-27755CRITICAL9.3PL ✓ten sam produkt

SODOLA SL902-SWTGW124AS — przewidywalne identyfikatory sesji umożliwiają Auth Bypass

CVE-2026-27751CRITICAL9.3PL ✓ten sam produkt

Domyślne dane uwierzytelniające w firmware Sodola SL902-SWTGW124AS

CVE-2026-27752HIGH8.2ten sam produkt

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 transmit authentication credentials over unencrypte...

CVE-2026-27757HIGH7.1ten sam produkt

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain an authentication vulnerability that allows...

CVE-2026-27754MEDIUM6.9ten sam produkt

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 use the cryptographically broken MD5 hash function ...