CVE-2026-27757 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain an authentication vulnerability that allows authenticated users to change account passwords w…
High CVSS: 7.1

CVE-2026-27757

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain an authentication vulnerability that allows authenticated users to change account passwords without verifying the current password. Attackers who gain access to an authenticated session can modify credentials to maintain persistent access to the management interface.
Vendor
Sodola-network
Product
Sl902-swtgw124as Firmware
CWE
CWE-620
Yayın Tarihi
2026-02-27 19:16:09
Güncelleme
2026-03-03 19:09:01
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-620 Sl902-swtgw124as Firmware HIGH Sodola-network 2026

Referanslar

https://www.sodola-network.com/products/sodola-6-port-2-5g-easy-web-managed-switch-4-x-2-5g-base-t-ports-2-x-10g-sfp-static-aggregation-qos-vlan-igmp-2-5gb-network-home-lab-switch https://www.vulncheck.com/advisories/sodola-sl902-swtgw124as-unverified-password-change