Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.9
SODOLA SL902-SWTGW124AS: Unlimited Login Attempts
CVE-2026-27753
Summary
Some versions of the SODOLA SL902-SWTGW124AS firmware allow hackers to try guessing passwords without limits, potentially allowing unauthorized access to the management interface. This could let an attacker gain control of the device. Update the firmware to a version newer than 200.1.20 to fix this issue.
What to do
No fix is available yet. Check with your software vendor for updates.
Affected software
| Vendor | Product | Affected versions | Fix available |
|---|---|---|---|
| sodola-network | sl902-swtgw124as_firmware | <= 200.1.20 | – |
Original title
SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain an authentication bypass vulnerability that allows remote attackers to perform unlimited login attempts against the management int...
Original description
SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain an authentication bypass vulnerability that allows remote attackers to perform unlimited login attempts against the management interface. Attackers can conduct online password guessing attacks without account lockout or rate limiting restrictions to gain unauthorized access to the device management interface.
nvd CVSS3.1
6.5
nvd CVSS4.0
6.9
Vulnerability type
CWE-307
Published: 27 Feb 2026 · Updated: 12 Mar 2026 · First seen: 6 Mar 2026