CVE-2026-27752: SODOLA SL902-SWTGW124AS <= 200.1.20 Cleartext Credential Transmission
SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 transmit authentication credentials over unencrypted HTTP, allowing attackers to capture credentials. An attacker positioned to observe network traffic between a user and the device can intercept credentials and reuse them to gain administrative access to the gateway.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-27752?
CVE-2026-27752 is considered a high severity vulnerability due to the risk of credential theft over unencrypted transmissions.
How do I fix CVE-2026-27752?
To fix CVE-2026-27752, update the SODOLA SL902-SWTGW124AS firmware to a version beyond 200.1.20 that supports encrypted transmission.
What types of credentials are impacted by CVE-2026-27752?
CVE-2026-27752 impacts authentication credentials transmitted over HTTP, allowing interception by attackers.
Who is affected by CVE-2026-27752?
Any user of SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 is affected by CVE-2026-27752.
Is remote exploitation possible with CVE-2026-27752?
Yes, remote exploitation is possible as attackers can capture credentials by monitoring unencrypted network traffic.