PT-2025-39363 · Syrotech · Sy-Gpon-2010-Wadont Router

Published 2025-09-25 · Updated 2025-09-25 · CVE-2025-10957

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Syrotech SY-GPON-2010-WADONT router (affected versions not specified)

Description The Syrotech SY-GPON-2010-WADONT router contains a flaw related to improper access control within its FTP service. A remote attacker can connect via FTP using default credentials and potentially gain unauthorized access to sensitive information, including configuration files and user credentials, stored on the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2025-10957

Affected Products

Sy-Gpon-2010-Wadont Router

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-10957 · Security Note
• https://twitter.com/CveFindCom/status/1971185418532999634 · Twitter Post
• https://twitter.com/CVEnew/status/1971190539606213010 · Twitter Post
• https://cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2025-0223 · Note
• https://t.me/cveNotify/136377 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1971197313323266300 · Twitter Post