SyroTech vulnerabilities
We track 4 vulnerabilities in SyroTech products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on November 25, 2025.
Latest SyroTech vulnerabilities
- 9.0 Critical severity
Sy-gpon-1110-wdont Firmware: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered in Syrotech SY-GPON-1110-WDONT SYRO_3.7L_3.1.02-240517 allowing attackers to exctract the SSL Private Key, CA Certificate, SSL Certificate, and Client Certificates in .pem format in firmware in etc folder.
- 8.6 High severity
SyroTech SY-GPON-1110-WDONT router: On-Chip Debug and Test Interface With Improper Access Control
This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to presence of root terminal access on a serial interface without proper access control. An attacker with physical access could exploit this by accessing the root shell on the vulnerable syste
- 7.5 High severity
SyroTech SY-GPON-1110-WDONT router: Cleartext Transmission of Sensitive Information
This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to transmission of password in plain text. A remote attacker could exploit this vulnerability by intercepting transmission within an HTTP session on the vulnerable system. Successful exploitat
- 7.5 High severity
SyroTech SY-GPON-1110-WDONT router: Incorrect Permission Assignment for Critical Resource
This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to missing HTTPOnly flag for the session cookies associated with the router's web management interface. An attacker with remote access could exploit this by intercepting transmission within an