CVE-2024-41686: fallo de gravedad alta en SyroTech SY-GPON-1110-WDONT router
Password Policy Bypass Vulnerability
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 7.3epss 0.2%
This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to improper implementation of password policies. A local attacker could exploit this by creating password that do not adhere to the defined security standards/policy on the vulnerable system.
Successful exploitation of this vulnerability could allow the attacker to expose the router to potential security threats.
CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
SyroTech · SyroTech SY-GPON-1110-WDONT routerCVEs relacionadas — SyroTech SY-GPON-1110-WDONT router
En el mismo producto, de las más peligrosas a las menos.
CVE-2024-41685MEDIUMCookie Without HTTPOnly Flag Set VulnerabilityEPSS 0.5%CVE-2024-41687HIGHCleartext Transmission of Sensitive Information VulnerabilityEPSS 0.3%CVE-2024-41692HIGHIncorrect Access Control VulnerabilityEPSS 0.3%CVE-2024-41684MEDIUMCookie Without Secure Flag Set VulnerabilityEPSS 0.2%CVE-2024-41689MEDIUMHard-coded Credentials VulnerabilityEPSS 0.2%CVE-2024-41691HIGHInsecure Storage of Sensitive Information VulnerabilityEPSS 0.2%