SODOLA SL902-SWTGW124AS vulnerabilities

3 known vulnerabilities in SODOLA SL902-SWTGW124AS from Shenzhen Hongyavision Technology Co., Ltd. (Sodola Networks). 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  SODOLA SL902-SWTGW124AS: Unverified Password Change

  CVE-2026-27757Feb 27, 2026Shenzhen Hongyavision Technology Co., Ltd. (Sodola Networks)

  SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain an authentication vulnerability that allows authenticated users to change account passwords without verifying the current password. Attackers who gain access to an authenticated session can mod

• 9.8 Critical severity

  SODOLA SL902-SWTGW124AS: Use of Insufficiently Random Values

  CVE-2026-27755Feb 27, 2026Shenzhen Hongyavision Technology Co., Ltd. (Sodola Networks)

  SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a weak session identifier generation vulnerability that allows attackers to forge authenticated sessions by computing predictable MD5-based cookies. Attackers who know or guess valid credential

• 9.8 Critical severity

  SODOLA SL902-SWTGW124AS: Use of Default Credentials

  CVE-2026-27751Feb 27, 2026Shenzhen Hongyavision Technology Co., Ltd. (Sodola Networks)

  SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a default credentials vulnerability that allows remote attackers to obtain administrative access to the management interface. Attackers can authenticate using the hardcoded default credentials