CVE-2026-27755 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a weak session identifier generation vulnerability that allows attackers to forge authenticat…
Critical CVSS: 9.3

CVE-2026-27755

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a weak session identifier generation vulnerability that allows attackers to forge authenticated sessions by computing predictable MD5-based cookies. Attackers who know or guess valid credentials can calculate the session identifier offline and bypass authentication without completing the login flow, gaining unauthorized access to the device.
Vendor
Sodola-network
Product
Sl902-swtgw124as Firmware
CWE
CWE-330
Yayın Tarihi
2026-02-27 19:16:09
Güncelleme
2026-03-03 19:09:12
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-330 Sl902-swtgw124as Firmware CRITICAL Sodola-network 2026

Referanslar

https://www.sodola-network.com/products/sodola-6-port-2-5g-easy-web-managed-switch-4-x-2-5g-base-t-ports-2-x-10g-sfp-static-aggregation-qos-vlan-igmp-2-5gb-network-home-lab-switch https://www.vulncheck.com/advisories/sodola-sl902-swtgw124as-predictable-session-id