Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

8 records

Vendor: Shenzhen Hongyavision Technology Co., Ltd. (Sodola Networks) Component: Sl902-swtgw124as Firmware Clear all filters
TI-2026-22118 CVE-2026-27758 · GHSA-9m8f-2x73-hmhp

SODOLA SL902-SWTGW124AS <= 200.1.20 Missing CSRF Protections

Priority LOW 22

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a cross-site request forgery vulnerability in its management interface that allows attackers to induce authenticated users into submitting forged request…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00121 Published 2026-02-27 No fix listed CWE-352
TI-2026-22117 CVE-2026-27757 · GHSA-4gmm-r9mc-3p3g

SODOLA SL902-SWTGW124AS <= 200.1.20 Unverified Password Change

Priority LOW 31

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain an authentication vulnerability that allows authenticated users to change account passwords without verifying the current password.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00286 Published 2026-02-27 No fix listed CWE-620
TI-2026-22116 CVE-2026-27756 · GHSA-8m37-836g-p9g7

SODOLA SL902-SWTGW124AS <= 200.1.20 Reflected XSS in Management Interface

Priority LOW 22

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a reflected cross-site scripting vulnerability in the management interface where user input is not properly encoded before output.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00184 Published 2026-02-27 No fix listed CWE-79
TI-2026-22115 CVE-2026-27755 · GHSA-pgqj-4vx9-9f56

SODOLA SL902-SWTGW124AS <= 200.1.20 Predictable Session ID

Priority MEDIUM 48

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a weak session identifier generation vulnerability that allows attackers to forge authenticated sessions by computing predictable MD5-based cookies.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00457 Published 2026-02-27 No fix listed CWE-330
TI-2026-22114 CVE-2026-27754 · GHSA-x27g-4qrq-h538

SODOLA SL902-SWTGW124AS <= 200.1.20 MD5 Session Token Generation

Priority LOW 35

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 use the cryptographically broken MD5 hash function for session cookie generation, weakening session security.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00135 Published 2026-02-27 No fix listed CWE-328
TI-2026-22113 CVE-2026-27753 · GHSA-jq67-r98p-22qp

SODOLA SL902-SWTGW124AS <= 200.1.20 Improper Login Rate Limiting

Priority LOW 36

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain an authentication bypass vulnerability that allows remote attackers to perform unlimited login attempts against the management interface.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00362 Published 2026-02-27 No fix listed CWE-307
TI-2026-22112 CVE-2026-27752 · GHSA-xp4w-rp7m-jgwq

SODOLA SL902-SWTGW124AS <= 200.1.20 Cleartext Credential Transmission

Priority LOW 35

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 transmit authentication credentials over unencrypted HTTP, allowing attackers to capture credentials.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00217 Published 2026-02-27 No fix listed CWE-319
TI-2026-22111 CVE-2026-27751 · GHSA-j48f-gjx4-8g9f

SODOLA SL902-SWTGW124AS <= 200.1.20 Use of Default Credentials

Priority MEDIUM 49

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a default credentials vulnerability that allows remote attackers to obtain administrative access to the management interface.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00506 Published 2026-02-27 No fix listed CWE-1392