PT-2026-22370 · Sodola · Sodola Sl902-Swtgw124As

Kazuma Matsumoto · Published 2026-02-27 · Updated 2026-03-03 · CVE-2026-27752

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SODOLA SL902-SWTGW124AS versions through 200.1.20

Description The firmware transmits authentication credentials over unencrypted HTTP, potentially allowing attackers to capture credentials. An attacker observing network traffic between a user and the device can intercept credentials and reuse them to gain administrative access to the gateway.

Recommendations Update to a firmware version beyond 200.1.20.

Fix

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

CVE-2026-27752

Affected Products

Sodola Sl902-Swtgw124As

References · 7

• https://osv.dev/vulnerability/CVE-2026-27752 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-27752 · Security Note
• https://vulncheck.com/advisories/sodola-sl902-swtgw124as-cleartext-credential-transmission · Note
• https://sodola-network.com/products/sodola-6-port-2-5g-easy-web-managed-switch-4-x-2-5g-base-t-ports-2-x-10g-sfp-static-aggregation-qos-vlan-igmp-2-5gb-network-home-lab-switch · Note
• https://t.me/cveNotify/154010 · Telegram Post
• https://twitter.com/CVEnew/status/2027466589881389331 · Twitter Post
• https://t.me/CVEtracker/46006 · Telegram Post