CVE-2026-27753

Medium CVSS: 6.9

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain an authentication bypass vulnerability that allows remote attackers to perform unlimited login attempts against the management interface. Attackers can conduct online password guessing attacks without account lockout or rate limiting restrictions to gain unauthorized access to the device management interface.

Vendor

Sodola-network

Product

Sl902-swtgw124as Firmware

CWE

CWE-307

Yayın Tarihi

2026-02-27 18:16:13

Güncelleme

2026-03-03 19:09:33

Source Identifier

disclosure@vulncheck.com

KEV Date Added

Kategoriler

CWE-307 Sl902-swtgw124as Firmware MEDIUM Sodola-network 2026

Referanslar

https://www.sodola-network.com/products/sodola-6-port-2-5g-easy-web-managed-switch-4-x-2-5g-base-t-ports-2-x-10g-sfp-static-aggregation-qos-vlan-igmp-2-5gb-network-home-lab-switch https://www.vulncheck.com/advisories/sodola-sl902-swtgw124as-improper-login-rate-limiting

Benzer Kayıtlar

Medium

CVE-2026-27758

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a cross-site request forgery vulnerability in its man…

Medium

CVE-2026-27754

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 use the cryptographically broken MD5 hash function for sessio…

Critical

CVE-2026-27755

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a weak session identifier generation vulnerability th…

Medium

CVE-2026-27756

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a reflected cross-site scripting vulnerability in the…

High

CVE-2026-27757

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain an authentication vulnerability that allows authentic…

High

CVE-2026-27752

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 transmit authentication credentials over unencrypted HTTP, al…