Read the docs

SyroTech

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

SyroTech records in CISA KEV

No SyroTech vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Sy-gpon-1110-wdont Firmware 9 records HIGH

Records

10 records

TI-2025-39443 CVE-2025-63729 · GHSA-qr4p-6qp4-5mch

An issue was discovered in Syrotech SY-GPON-1110-WDONT SYRO_3.7L_3.1.02-240517 allowing…

Priority HIGH 72

An issue was discovered in Syrotech SY-GPON-1110-WDONT SYRO_3.7L_3.1.02-240517 allowing attackers to exctract the SSL Private Key, CA Certificate, SSL Certificate, and Client Certificates in .pem format in firmware in et…

CVSS 3.1CRITICAL 9.0 Local No auth No interaction EPSS 0.00093 Published 2025-11-25 No fix listed CWE-200
TI-2024-27752 CVE-2024-41692 · GHSA-6572-8r92-7fjf

Incorrect access control in SyroTech SY-GPON-1110-WDONT router

Priority LOW 39

This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to presence of root terminal access on a serial interface without proper access control.

CVSS 4.0HIGH 8.6 Physical No auth No interaction EPSS 0.00271 Published 2024-07-26 No fix listed CWE-1191
TI-2024-27745 CVE-2024-41685 · GHSA-w9qp-xc8f-8xcq

Cookie Without HTTPOnly Flag Set Vulnerability

Priority LOW 37

This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to missing HTTPOnly flag for the session cookies associated with the router's web management interface.

CVSS 4.0MEDIUM 6.9 Network No auth User interaction EPSS 0.00497 Published 2024-07-26 No fix listed CWE-1004
TI-2024-27746 CVE-2024-41686 · GHSA-phh7-8q4v-gv55

Password Policy Bypass Vulnerability

Priority LOW 33

This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to improper implementation of password policies.

CVSS 4.0HIGH 7.3 Adjacent network High privileges No interaction EPSS 0.00157 Published 2024-07-26 No fix listed CWE-179
TI-2024-27750 CVE-2024-41690 · GHSA-g5wh-4vxr-qmjg

Default Credential Storage in Plaintext Vulnerability

Priority LOW 32

This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to storing of default username and password credentials in plaintext within the router's firmware/ database.

CVSS 4.0HIGH 7.0 Physical No auth No interaction EPSS 0.00152 Published 2024-07-26 No fix listed CWE-312
TI-2024-27744 CVE-2024-41684 · GHSA-8vm5-mx6j-hvfc

Cookie Without Secure Flag Set Vulnerability

Priority LOW 30

This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to missing secure flag for the session cookies associated with the router's web management interface.

CVSS 4.0MEDIUM 6.9 Network No auth User interaction EPSS 0.00207 Published 2024-07-26 No fix listed CWE-614
TI-2024-27749 CVE-2024-41689 · GHSA-92vm-7577-pphj

Hard-coded credentials in SyroTech SY-GPON-1110-WDONT router

Priority LOW 23

This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to unencrypted storing of WPA/ WPS credentials within the router's firmware/ database.

CVSS 4.0MEDIUM 5.2 Physical No auth No interaction EPSS 0.00153 Published 2024-07-26 No fix listed CWE-798
Open these records in search →