CVE-2026-27753: SODOLA SL902-SWTGW124AS <= 200.1.20 Improper Login Rate Limiting
SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain an authentication bypass vulnerability that allows remote attackers to perform unlimited login attempts against the management interface. Attackers can conduct online password guessing attacks without account lockout or rate limiting restrictions to gain unauthorized access to the device management interface.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-27753?
CVE-2026-27753 is classified as a high severity vulnerability due to its potential for remote exploitation through unlimited login attempts.
How do I fix CVE-2026-27753?
To mitigate CVE-2026-27753, upgrade the SODOLA SL902-SWTGW124AS firmware to a version newer than 200.1.20 that addresses the authentication bypass.
What type of attack does CVE-2026-27753 allow?
CVE-2026-27753 allows remote attackers to conduct brute force attacks due to improper login rate limiting.
Which devices are affected by CVE-2026-27753?
CVE-2026-27753 affects SODOLA SL902-SWTGW124AS firmware versions up to and including 200.1.20.
Is there a workaround for CVE-2026-27753 until a fix is applied?
Currently, there is no known effective workaround for CVE-2026-27753; immediate firmware upgrade is recommended.