CVE-2026-27757: SODOLA SL902-SWTGW124AS <= 200.1.20 Unverified Password Change
SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain an authentication vulnerability that allows authenticated users to change account passwords without verifying the current password. Attackers who gain access to an authenticated session can modify credentials to maintain persistent access to the management interface.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-27757?
CVE-2026-27757 is considered a critical authentication vulnerability due to its potential to allow unauthorized password changes.
How do I fix CVE-2026-27757?
To fix CVE-2026-27757, users should upgrade the SODOLA SL902-SWTGW124AS firmware to a version beyond 200.1.20 that addresses this authentication issue.
Who is affected by CVE-2026-27757?
Any user of the SODOLA SL902-SWTGW124AS device running firmware version 200.1.20 or lower is affected by CVE-2026-27757.
What type of vulnerability is CVE-2026-27757?
CVE-2026-27757 is an authentication vulnerability that enables unauthorized password changes without verifying the existing password.
Can an attacker exploit CVE-2026-27757 remotely?
Yes, an attacker with authenticated access can exploit CVE-2026-27757 to change user passwords without verification.