Read the docs

Shenzhen Hongyavision Technology Co., Ltd. (Sodola Networks)

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Shenzhen Hongyavision Technology Co., Ltd. (Sodola Networks) records in CISA KEV

No Shenzhen Hongyavision Technology Co., Ltd. (Sodola Networks) vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Sl902-swtgw124as Firmware 8 records MEDIUM

Records

8 records

TI-2026-22111 CVE-2026-27751 · GHSA-j48f-gjx4-8g9f

SODOLA SL902-SWTGW124AS <= 200.1.20 Use of Default Credentials

Priority MEDIUM 49

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a default credentials vulnerability that allows remote attackers to obtain administrative access to the management interface.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00506 Published 2026-02-27 No fix listed CWE-1392
TI-2026-22115 CVE-2026-27755 · GHSA-pgqj-4vx9-9f56

SODOLA SL902-SWTGW124AS <= 200.1.20 Predictable Session ID

Priority MEDIUM 48

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a weak session identifier generation vulnerability that allows attackers to forge authenticated sessions by computing predictable MD5-based cookies.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00457 Published 2026-02-27 No fix listed CWE-330
TI-2026-22113 CVE-2026-27753 · GHSA-jq67-r98p-22qp

SODOLA SL902-SWTGW124AS <= 200.1.20 Improper Login Rate Limiting

Priority LOW 36

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain an authentication bypass vulnerability that allows remote attackers to perform unlimited login attempts against the management interface.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00362 Published 2026-02-27 No fix listed CWE-307
TI-2026-22114 CVE-2026-27754 · GHSA-x27g-4qrq-h538

SODOLA SL902-SWTGW124AS <= 200.1.20 MD5 Session Token Generation

Priority LOW 35

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 use the cryptographically broken MD5 hash function for session cookie generation, weakening session security.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00135 Published 2026-02-27 No fix listed CWE-328
TI-2026-22112 CVE-2026-27752 · GHSA-xp4w-rp7m-jgwq

SODOLA SL902-SWTGW124AS <= 200.1.20 Cleartext Credential Transmission

Priority LOW 35

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 transmit authentication credentials over unencrypted HTTP, allowing attackers to capture credentials.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00217 Published 2026-02-27 No fix listed CWE-319
TI-2026-22117 CVE-2026-27757 · GHSA-4gmm-r9mc-3p3g

SODOLA SL902-SWTGW124AS <= 200.1.20 Unverified Password Change

Priority LOW 31

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain an authentication vulnerability that allows authenticated users to change account passwords without verifying the current password.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00286 Published 2026-02-27 No fix listed CWE-620
TI-2026-22118 CVE-2026-27758 · GHSA-9m8f-2x73-hmhp

SODOLA SL902-SWTGW124AS <= 200.1.20 Missing CSRF Protections

Priority LOW 22

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a cross-site request forgery vulnerability in its management interface that allows attackers to induce authenticated users into submitting forged request…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00121 Published 2026-02-27 No fix listed CWE-352
TI-2026-22116 CVE-2026-27756 · GHSA-8m37-836g-p9g7

SODOLA SL902-SWTGW124AS <= 200.1.20 Reflected XSS in Management Interface

Priority LOW 22

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a reflected cross-site scripting vulnerability in the management interface where user input is not properly encoded before output.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00184 Published 2026-02-27 No fix listed CWE-79
Open these records in search →