CVE-2026-27755: SODOLA SL902-SWTGW124AS <= 200.1.20 Predictable Session ID
SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a weak session identifier generation vulnerability that allows attackers to forge authenticated sessions by computing predictable MD5-based cookies. Attackers who know or guess valid credentials can calculate the session identifier offline and bypass authentication without completing the login flow, gaining unauthorized access to the device.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-27755?
CVE-2026-27755 is classified as a high severity vulnerability due to its potential for allowing session hijacking.
How do I fix CVE-2026-27755?
To mitigate CVE-2026-27755, update the SODOLA SL902-SWTGW124AS firmware to a version later than 200.1.20.
What types of attacks are possible with CVE-2026-27755?
CVE-2026-27755 allows attackers to forge authenticated sessions, leading to unauthorized access and session hijacking.
Which versions of SODOLA SL902-SWTGW124AS are affected by CVE-2026-27755?
CVE-2026-27755 affects all SODOLA SL902-SWTGW124AS firmware versions up to and including 200.1.20.
How can I determine if my device is vulnerable to CVE-2026-27755?
You can determine vulnerability to CVE-2026-27755 by checking the firmware version of your SODOLA SL902-SWTGW124AS device.