Syrotech Sy-gpon-1110-wdont Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Syrotech Sy-gpon-1110-wdont Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

• CVE-2025-63729 — CVSS 9.0 (critical): An issue was discovered in Syrotech SY-GPON-1110-WDONT SYRO_3.7L_3.1.02-240517 allowing attackers to exctract the SSL Private Key, CA…
• CVE-2024-41687 — CVSS 7.5 (high): This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to transmission of password in plain text. A remote attacker could…
• CVE-2024-41685 — CVSS 7.5 (high): This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to missing HTTPOnly flag for the session cookies associated with the…
• CVE-2024-41684 — CVSS 5.3 (medium): This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to missing secure flag for the session cookies associated with the…
• CVE-2024-41688 — CVSS 4.6 (medium): This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due lack of encryption in storing of usernames and passwords within the…
• CVE-2024-41689 — CVSS 4.6 (medium): This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to unencrypted storing of WPA/ WPS credentials within the router's…
• CVE-2024-41690 — CVSS 4.6 (medium): This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to storing of default username and password credentials in plaintext…
• CVE-2024-41691 — CVSS 4.6 (medium): This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to storing of FTP credentials in plaintext within the SquashFS-root…
• CVE-2024-41686 — CVSS 3.3 (low): This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to improper implementation of password policies. A local attacker could…