PT-2026-22371 · Sodola · Sodola Sl902-Swtgw124As

Kazuma Matsumoto · Publicado 2026-02-27 · Atualizado 2026-03-03 · CVE-2026-27753

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SODOLA SL902-SWTGW124AS firmware versions through 200.1.20

Description The firmware contains a flaw that permits remote attackers to attempt unlimited logins to the management interface. This bypasses normal security measures, allowing attackers to guess passwords without account lockout or rate limiting. Successful exploitation grants unauthorized access to the device management interface.

Recommendations Update the firmware to a version later than 200.1.20.

Correção

Improper Restriction of Excessive Authentication Attempts

Enumeração de Fraquezas

CWE-307

Identificadores relacionados

CVE-2026-27753

Produtos afetados

Sodola Sl902-Swtgw124As

Referências · 7

• https://twitter.com/CVEnew/status/2027466588996440544 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-27753 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-27753 · Nota de Segurança
• https://t.me/CVEtracker/46007 · Publicação no Telegram
• https://sodola-network.com/products/sodola-6-port-2-5g-easy-web-managed-switch-4-x-2-5g-base-t-ports-2-x-10g-sfp-static-aggregation-qos-vlan-igmp-2-5gb-network-home-lab-switch · Nota
• https://vulncheck.com/advisories/sodola-sl902-swtgw124as-improper-login-rate-limiting · Nota
• https://t.me/cveNotify/154011 · Publicação no Telegram