PT-2026-22370 · Sodola · Sodola Sl902-Swtgw124As

Kazuma Matsumoto · Publicado 2026-02-27 · Atualizado 2026-03-03 · CVE-2026-27752

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SODOLA SL902-SWTGW124AS versions through 200.1.20

Description The firmware transmits authentication credentials over unencrypted HTTP, potentially allowing attackers to capture credentials. An attacker observing network traffic between a user and the device can intercept credentials and reuse them to gain administrative access to the gateway.

Recommendations Update to a firmware version beyond 200.1.20.

Correção

Cleartext Transmission of Sensitive Information

Enumeração de Fraquezas

CWE-319

Identificadores relacionados

CVE-2026-27752

Produtos afetados

Sodola Sl902-Swtgw124As

Referências · 7

• https://vulncheck.com/advisories/sodola-sl902-swtgw124as-cleartext-credential-transmission · Nota
• https://sodola-network.com/products/sodola-6-port-2-5g-easy-web-managed-switch-4-x-2-5g-base-t-ports-2-x-10g-sfp-static-aggregation-qos-vlan-igmp-2-5gb-network-home-lab-switch · Nota
• https://osv.dev/vulnerability/CVE-2026-27752 · Aviso do Fabricante
• https://t.me/cveNotify/154010 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2027466589881389331 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-27752 · Nota de Segurança
• https://t.me/CVEtracker/46006 · Publicação no Telegram