CVE-2026-27752
SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 transmit authentication credentials over unencrypted HTTP, allowing attackers to capture credentials. An attacker positioned to observe network traffic between a user and the device can intercept credentials and reuse them to gain administrative access to the gateway.
Vendor
Product
CWE
Yayın Tarihi
2026-02-27 18:16:13
Güncelleme
2026-03-03 19:09:44
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-