Sodola-network Sl902-swtgw124as Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Sodola-network Sl902-swtgw124as Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2026-27751 — CVSS 9.8 (critical): SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a default credentials vulnerability that allows remote attackers to…
• CVE-2026-27755 — CVSS 9.8 (critical): SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a weak session identifier generation vulnerability that allows attackers…
• CVE-2026-27757 — CVSS 7.1 (high): SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain an authentication vulnerability that allows authenticated users to…
• CVE-2026-27753 — CVSS 6.5 (medium): SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain an authentication bypass vulnerability that allows remote attackers to…
• CVE-2026-27754 — CVSS 6.5 (medium): SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 use the cryptographically broken MD5 hash function for session cookie…
• CVE-2026-27756 — CVSS 6.1 (medium): SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a reflected cross-site scripting vulnerability in the management…
• CVE-2026-27752 — CVSS 5.9 (medium): SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 transmit authentication credentials over unencrypted HTTP, allowing attackers to…
• CVE-2026-27758 — CVSS 4.3 (medium): SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a cross-site request forgery vulnerability in its management interface…