CVE-2026-27753

6.5 MEDIUM

Published: February 27, 2026 Modified: March 03, 2026

Description

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain an authentication bypass vulnerability that allows remote attackers to perform unlimited login attempts against the management interface. Attackers can conduct online password guessing attacks without account lockout or rate limiting restrictions to gain unauthorized access to the device management interface.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

CVSS v3.x Details

0.0 Low Medium High Critical 10.0

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

https://www.sodola-network.com/products/sodola-6-port-2-5g-easy-web-managed-switch-4-x-2-5g-base-t-ports-2-x-10g-sfp-static-aggregation-qos-vlan-igmp-2-5gb-network-home-lab-switch

Source: disclosure@vulncheck.com

Product

https://www.vulncheck.com/advisories/sodola-sl902-swtgw124as-improper-login-rate-limiting

Source: disclosure@vulncheck.com

Third Party Advisory

2 reference(s) from NVD

Quick Stats

CVSS v3 Score

6.5 / 10.0

EPSS (Exploit Probability)

0.1%

19th percentile

Exploitation Status

Not in CISA KEV

Weaknesses (CWE)

CWE-307

Affected Vendors

sodola-network

Related CVEs

CVE-2026-4514 6.3

CVE-2026-4513 6.3

CVE-2026-4511 6.3

CVE-2026-4510 4.3

CVE-2026-4373 7.5