SyroTech SY-GPON-1110-WDONT router vulnerabilities

3 known vulnerabilities in SyroTech SY-GPON-1110-WDONT router from SyroTech. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  SyroTech SY-GPON-1110-WDONT router: On-Chip Debug and Test Interface With Improper Access Control

  CVE-2024-41692Jul 26, 2024SyroTech

  This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to presence of root terminal access on a serial interface without proper access control. An attacker with physical access could exploit this by accessing the root shell on the vulnerable syste

• 7.5 High severity

  SyroTech SY-GPON-1110-WDONT router: Cleartext Transmission of Sensitive Information

  CVE-2024-41687Jul 26, 2024SyroTech

  This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to transmission of password in plain text. A remote attacker could exploit this vulnerability by intercepting transmission within an HTTP session on the vulnerable system. Successful exploitat

• 7.5 High severity

  SyroTech SY-GPON-1110-WDONT router: Incorrect Permission Assignment for Critical Resource

  CVE-2024-41685Jul 26, 2024SyroTech

  This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to missing HTTPOnly flag for the session cookies associated with the router's web management interface. An attacker with remote access could exploit this by intercepting transmission within an