CVE-2026-27752Disclosure(sodola-network / sl902-swtgw124as)

LOWCVSS 8.2 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 transmit authentication credentials over unencrypted HTTP, allowing attackers to capture credentials. An attacker positioned to observe network traffic between a user and the device can intercept credentials and reuse them to gain administrative access to the gateway.

sodola-network CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.vulncheck.com/advisories/sodola-sl902-swtgw124as-cleartext-credential-transmission

Other references

https://www.sodola-network.com/products/sodola-6-port-2-5g-easy-web-managed-switch-4-x-2-5g-base-t-ports-2-x-10g-sfp-static-aggregation-qos-vlan-igmp-2-5gb-network-home-lab-switch

Weakness type (CWE)

CWE-319

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

sl902-swtgw124as
sl902-swtgw124as_firmware

Threat summary

1 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
Disclosure: 1 classified signal
1 total mentions across 1 day

Affected systems

Vendors

sodola-network

Products

sl902-swtgw124assl902-swtgw124as_firmware

1 version affected across 2 products

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Referenced assets1 URL

By indicator

https://www.cve.org/CVERecord?id=CVE-2026-27752

Full discourse1 post

CVE@CVEnew223d
Disclosure
CVE-2026-27752 SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 transmit authentication credentials over unencrypted HTTP, allowing attackers to capture credentials. An at… https://www.cve.org/CVERecord?id=CVE-2026-27752
Post summary
The post discloses that SODOLA firmware versions send authentication credentials over HTTP, allowing credential interception; it provides the vulnerability detail but no PoC, exploit, or patch information.
0000092
56.6K followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
HW	sodola-network	sl902-swtgw124as	-	-	-
OS	sodola-network	sl902-swtgw124as_firmware	-	-	-

Explore more

Back to dashboard sodola-network CVEs sl902-swtgw124as vulnerabilities