Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

9 records

Vendor: SyroTech Component: Sy-gpon-1110-wdont Firmware Clear all filters
TI-2025-39443 CVE-2025-63729 · GHSA-qr4p-6qp4-5mch

An issue was discovered in Syrotech SY-GPON-1110-WDONT SYRO_3.7L_3.1.02-240517 allowing…

Priority HIGH 72

An issue was discovered in Syrotech SY-GPON-1110-WDONT SYRO_3.7L_3.1.02-240517 allowing attackers to exctract the SSL Private Key, CA Certificate, SSL Certificate, and Client Certificates in .pem format in firmware in et…

CVSS 3.1CRITICAL 9.0 Local No auth No interaction EPSS 0.00093 Published 2025-11-25 No fix listed CWE-200
TI-2024-27750 CVE-2024-41690 · GHSA-g5wh-4vxr-qmjg

Default Credential Storage in Plaintext Vulnerability

Priority LOW 32

This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to storing of default username and password credentials in plaintext within the router's firmware/ database.

CVSS 4.0HIGH 7.0 Physical No auth No interaction EPSS 0.00152 Published 2024-07-26 No fix listed CWE-312
TI-2024-27749 CVE-2024-41689 · GHSA-92vm-7577-pphj

Hard-coded credentials in SyroTech SY-GPON-1110-WDONT router

Priority LOW 23

This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to unencrypted storing of WPA/ WPS credentials within the router's firmware/ database.

CVSS 4.0MEDIUM 5.2 Physical No auth No interaction EPSS 0.00153 Published 2024-07-26 No fix listed CWE-798
TI-2024-27746 CVE-2024-41686 · GHSA-phh7-8q4v-gv55

Password Policy Bypass Vulnerability

Priority LOW 33

This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to improper implementation of password policies.

CVSS 4.0HIGH 7.3 Adjacent network High privileges No interaction EPSS 0.00157 Published 2024-07-26 No fix listed CWE-179
TI-2024-27745 CVE-2024-41685 · GHSA-w9qp-xc8f-8xcq

Cookie Without HTTPOnly Flag Set Vulnerability

Priority LOW 37

This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to missing HTTPOnly flag for the session cookies associated with the router's web management interface.

CVSS 4.0MEDIUM 6.9 Network No auth User interaction EPSS 0.00497 Published 2024-07-26 No fix listed CWE-1004
TI-2024-27744 CVE-2024-41684 · GHSA-8vm5-mx6j-hvfc

Cookie Without Secure Flag Set Vulnerability

Priority LOW 30

This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to missing secure flag for the session cookies associated with the router's web management interface.

CVSS 4.0MEDIUM 6.9 Network No auth User interaction EPSS 0.00207 Published 2024-07-26 No fix listed CWE-614