PT-2026-22369 · Sodola · Sodola Sl902-Swtgw124As

Kazuma Matsumoto · Published 2026-02-27 · Updated 2026-03-04 · CVE-2026-27751

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SODOLA SL902-SWTGW124AS firmware versions through 200.1.20

Description The device allows remote attackers to obtain administrative access to the management interface. Attackers can authenticate using hardcoded default credentials without password change enforcement, gaining full administrative control of the device.

Recommendations Versions prior to 200.1.21 should change the default credentials immediately.

Fix

Weakness Enumeration

CWE-1392

Related Identifiers

CVE-2026-27751

Affected Products

Sodola Sl902-Swtgw124As

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2026-27751 · Security Note
• https://osv.dev/vulnerability/CVE-2026-27751 · Vendor Advisory
• https://vulncheck.com/advisories/sodola-sl902-swtgw124as-use-of-default-credentials · Note
• https://twitter.com/VulmonFeeds/status/2027492626241401179 · Twitter Post
• https://twitter.com/CveFindCom/status/2027454080969261403 · Twitter Post
• https://twitter.com/TheHackerWire/status/2027450191650169197 · Twitter Post
• https://twitter.com/CVEnew/status/2027466590720299462 · Twitter Post
• https://t.me/CVEtracker/46005 · Telegram Post
• https://sodola-network.com/products/sodola-6-port-2-5g-easy-web-managed-switch-4-x-2-5g-base-t-ports-2-x-10g-sfp-static-aggregation-qos-vlan-igmp-2-5gb-network-home-lab-switch · Note
• https://twitter.com/vuldb/status/2027951352618639454 · Twitter Post
• https://twitter.com/cracbot/status/2029150052871225797 · Twitter Post