PT-2026-22371 · Sodola · Sodola Sl902-Swtgw124As

Kazuma Matsumoto · Published 2026-02-27 · Updated 2026-03-03 · CVE-2026-27753

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SODOLA SL902-SWTGW124AS firmware versions through 200.1.20

Description The firmware contains a flaw that permits remote attackers to attempt unlimited logins to the management interface. This bypasses normal security measures, allowing attackers to guess passwords without account lockout or rate limiting. Successful exploitation grants unauthorized access to the device management interface.

Recommendations Update the firmware to a version later than 200.1.20.

Fix

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

Related Identifiers

CVE-2026-27753

Affected Products

Sodola Sl902-Swtgw124As

References · 7

• https://osv.dev/vulnerability/CVE-2026-27753 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-27753 · Security Note
• https://twitter.com/CVEnew/status/2027466588996440544 · Twitter Post
• https://t.me/CVEtracker/46007 · Telegram Post
• https://sodola-network.com/products/sodola-6-port-2-5g-easy-web-managed-switch-4-x-2-5g-base-t-ports-2-x-10g-sfp-static-aggregation-qos-vlan-igmp-2-5gb-network-home-lab-switch · Note
• https://vulncheck.com/advisories/sodola-sl902-swtgw124as-improper-login-rate-limiting · Note
• https://t.me/cveNotify/154011 · Telegram Post