Lucene search
K

94 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 8:34 a.m.7 views

CVE-2024-41691

This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to storing of FTP credentials in plaintext within the SquashFS-root filesystem associated with the router's firmware. An attacker with physical access could exploit this by extracting the firmware and reverse engineer the binary...

7CVSS6.9AI score0.00058EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:34 a.m.4 views

CVE-2024-41686

This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to improper implementation of password policies. A local attacker could exploit this by creating password that do not adhere to the defined security standards/policy on the vulnerable system. Successful exploitation of this...

7.3CVSS6.8AI score0.00043EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:34 a.m.3 views

CVE-2024-41692

This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to presence of root terminal access on a serial interface without proper access control. An attacker with physical access could exploit this by accessing the root shell on the vulnerable system. Successful exploitation of this...

8.6CVSS7.5AI score0.00056EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:33 a.m.3 views

CVE-2024-41690

This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to storing of default username and password credentials in plaintext within the router's firmware/ database. An attacker with physical access could exploit this by extracting the firmware and reverse engineer the binary data to...

7CVSS7.1AI score0.00058EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:33 a.m.2 views

CVE-2024-41687

This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to transmission of password in plain text. A remote attacker could exploit this vulnerability by intercepting transmission within an HTTP session on the vulnerable system. Successful exploitation of this vulnerability could allow...

8.6CVSS7.3AI score0.00141EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/11/27 3:3 p.m.5 views

CVE-2025-63729

An issue was discovered in Syrotech SY-GPON-1110-WDONT SYRO3.7L3.1.02-240517 allowing attackers to exctract the SSL Private Key, CA Certificate, SSL Certificate, and Client Certificates in .pem format in firmware in etc folder...

9CVSS6.9AI score0.00009EPSS
Exploits1References1
EUVD
EUVD
added 2025/11/25 6:32 p.m.1 views

EUVD-2025-199605

An issue was discovered in Syrotech SY-GPON-1110-WDONT SYRO3.7L3.1.02-240517 allowing attackers to exctract the SSL Private Key, CA Certificate, SSL Certificate, and Client Certificates in .pem format in firmware in etc folder...

9CVSS6.4AI score0.00009EPSS
Exploits1References2
OSV
OSV
added 2025/11/25 5:15 p.m.1 views

CVE-2025-63729

An issue was discovered in Syrotech SY-GPON-1110-WDONT SYRO3.7L3.1.02-240517 allowing attackers to exctract the SSL Private Key, CA Certificate, SSL Certificate, and Client Certificates in .pem format in firmware in etc folder...

9CVSS5.8AI score0.00009EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/11/25 12:0 a.m.2 views

Syrotech SY-GPON-1110-WDONT 安全漏洞

Syrotech SY-GPON-1110-WDONT is a fiber optic terminal all-in-one from Syrotech India. A security vulnerability exists in Syrotech SY-GPON-1110-WDONT SYRO3.7L3.1.02-240517 version, which stems from an SSL private key and certificate that can be extracted from the etc folder...

9CVSS6.7AI score0.00009EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2025/11/25 12:0 a.m.1 views

CVE-2025-63729

An issue was discovered in Syrotech SY-GPON-1110-WDONT SYRO3.7L3.1.02-240517 allowing attackers to exctract the SSL Private Key, CA Certificate, SSL Certificate, and Client Certificates in .pem format in firmware in etc folder...

6.6AI score0.00009EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/11/25 12:0 a.m.3 views

PT-2025-48041

Name of the Vulnerable Software and Affected Versions Syrotech SY-GPON-1110-WDONT SYRO 3.7L 3.1.02-240517 Description An issue exists in Syrotech SY-GPON-1110-WDONT firmware where an attacker can extract the SSL Private Key, CA Certificate, SSL Certificate, and Client Certificates in .pem format...

9CVSS6.5AI score0.00009EPSS
Exploits1References5
CVE
CVE
added 2025/11/25 12:0 a.m.4 views

CVE-2025-63729

CVE-2025-63729 affects Syrotech SY-GPON-1110-WDONT SYRO_3.7L_3.1.02-240517. The vulnerability allows extraction of SSL private key, CA certificate, SSL certificate, and client certificates stored in PEM format in the firmware’s etc folder. Root cause details are not explicitly provided beyond the...

9CVSS6.6AI score0.00009EPSS
Exploits1References1Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-39136

Malicious code in bioql PyPI...

7CVSS5.2AI score0.00058EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-39134

Malicious code in bioql PyPI...

5.2CVSS5.2AI score0.00012EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-39132

Malicious code in bioql PyPI...

8.6CVSS7.6AI score0.00141EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-39137

Malicious code in bioql PyPI...

8.6CVSS6.6AI score0.00056EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-31076

Malicious code in bioql PyPI...

8.7CVSS6.6AI score0.00256EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-39133

Malicious code in bioql PyPI...

7CVSS5.2AI score0.0005EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-39135

Malicious code in bioql PyPI...

7CVSS5.2AI score0.00058EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-39129

Malicious code in bioql PyPI...

6.9CVSS5.7AI score0.00112EPSS
Exploits0References1
Rows per page
Query Builder