PT-2026-22369 · Sodola · Sodola Sl902-Swtgw124As

Kazuma Matsumoto · CVE-2026-27751 · Publicado 2026-02-27 · Atualizado 2026-03-04

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SODOLA SL902-SWTGW124AS firmware versions through 200.1.20

Description The device allows remote attackers to obtain administrative access to the management interface. Attackers can authenticate using hardcoded default credentials without password change enforcement, gaining full administrative control of the device.

Recommendations Versions prior to 200.1.21 should change the default credentials immediately.

Correção

Enumeração de Fraquezas

CWE-1392

Identificadores relacionados

CVE-2026-27751

Produtos afetados

Sodola Sl902-Swtgw124As

Referências · 11

• https://vulncheck.com/advisories/sodola-sl902-swtgw124as-use-of-default-credentials · Nota
• https://twitter.com/VulmonFeeds/status/2027492626241401179 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-27751 · Nota de Segurança
• https://twitter.com/CveFindCom/status/2027454080969261403 · Publicação no Twitter
• https://twitter.com/TheHackerWire/status/2027450191650169197 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2027466590720299462 · Publicação no Twitter
• https://t.me/CVEtracker/46005 · Publicação no Telegram
• https://sodola-network.com/products/sodola-6-port-2-5g-easy-web-managed-switch-4-x-2-5g-base-t-ports-2-x-10g-sfp-static-aggregation-qos-vlan-igmp-2-5gb-network-home-lab-switch · Nota
• https://twitter.com/vuldb/status/2027951352618639454 · Publicação no Twitter
• https://twitter.com/cracbot/status/2029150052871225797 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-27751 · Aviso do Fabricante