CVE-2024-41688: Cleartext Storage of Sensitive Information

This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due lack of encryption in storing of usernames and passwords within the router's firmware/ database. An attacker with physical access could exploit this by extracting the firmware and reverse engineer the binary data to access the...

CVE-2024-41685: Sensitive Cookie Without 'HttpOnly' Flag

This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to missing HTTPOnly flag for the session cookies associated with the router's web management interface. An attacker with remote access could exploit this by intercepting transmission within an HTTP session on the vulnerable syste...

CVE-2024-41692: On-Chip Debug and Test Interface With Improper Access Control

This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to presence of root terminal access on a serial interface without proper access control. An attacker with physical access could exploit this by accessing the root shell on the vulnerable system. Successful exploitation of this...

CVE-2024-41691: Cleartext Storage of Sensitive Information

This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to storing of FTP credentials in plaintext within the SquashFS-root filesystem associated with the router's firmware. An attacker with physical access could exploit this by extracting the firmware and reverse engineer the binary...

CVE-2024-41687: Cleartext Transmission of Sensitive Information

This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to transmission of password in plain text. A remote attacker could exploit this vulnerability by intercepting transmission within an HTTP session on the vulnerable system. Successful exploitation of this vulnerability could allow...

SyroTech SY-GPON-1110-WDONT 安全漏洞

The SyroTech SY-GPON-1110-WDONT is a wireless router from SyroTech. The SyroTech SY-GPON-1110-WDONT suffers from an Access Control Error vulnerability that arises from the presence of root terminal access on the serial interface without proper access control. An attacker could exploit this...

Weak password vulnerability in Syrotech SY-GPON-1110-WDAONT and SY-GPON-1110-WDCONT backends

The SY-GPON-1110-WDAONT and SY-GPON-1110-WDCONT are Syrotech routers, respectively. A weak password vulnerability exists in the backend of the Syrotech SY-GPON-1110-WDAONT and SY-GPON-1110-WDCONT, which can be exploited by an attacker to successfully log in to the backend management system and...

Information Disclosure Vulnerability in Syrotech EPON SY-GPON-1110-WDAONT

The EPON SY-GPON-1110-WDAONT is a router. An information disclosure vulnerability exists in the Syrotech EPON SY-GPON-1110-WDAONT, which can be exploited by attackers to obtain sensitive information...