Approved changes feed: RSS · Atom

cpe:2.3:a:syrotech:syrotech_sy-gpon-1110-wdont_router:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSyrotech (5287ccf3-8476-56e9-a830-26a1747523a8)
ProductSyrotech Sy Gpon 1110 Wdont Router (2160b611-cccd-5486-8fda-ede0e30a2cb4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-41692 vulnerable 2026-06-08 06:43:54.863578 Incorrect Access Control Vulnerability
This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to presence of root terminal access on a serial interface without proper access control. An attacker with physical access could exploit this by accessing the root shell on the vulnerable system. Successful exploitation of this vulnerability could allow the attacker to execute arbitrary commands with root privileges on the targeted system.
Published: 2024-07-26T12:11:27.774Z
Updated: 2024-08-02T04:46:52.682Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41691 vulnerable 2026-06-08 06:43:54.862758 Insecure Storage of Sensitive Information Vulnerability
This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to storing of FTP credentials in plaintext within the SquashFS-root filesystem associated with the router's firmware. An attacker with physical access could exploit this by extracting the firmware and reverse engineer the binary data to access the plaintext FTP credentials from the vulnerable system. Successful exploitation of this vulnerability could allow the attacker to gain unauthorized access to the FTP server associated with the targeted system.
Published: 2024-07-26T12:06:39.053Z
Updated: 2024-08-05T10:24:12.860Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41690 vulnerable 2026-06-08 06:43:54.862035 Default Credential Storage in Plaintext Vulnerability
This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to storing of default username and password credentials in plaintext within the router's firmware/ database. An attacker with physical access could exploit this by extracting the firmware and reverse engineer the binary data to access the plaintext default credentials on the vulnerable system. Successful exploitation of this vulnerability could allow the attacker to gain unauthorized access to the targeted system.
Published: 2024-07-26T12:02:29.466Z
Updated: 2024-08-02T04:46:52.684Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41689 vulnerable 2026-06-08 06:43:54.861422 Hard-coded Credentials Vulnerability
This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to unencrypted storing of WPA/ WPS credentials within the router's firmware/ database. An attacker with physical access could exploit this by extracting the firmware and reverse engineer the binary data to access the plaintext WPA/ WPS credentials on the vulnerable system. Successful exploitation of this vulnerability could allow the attacker to bypass WPA/ WPS and gain access to the Wi-Fi network of the targeted system.
Published: 2024-07-26T11:59:38.725Z
Updated: 2024-08-02T04:46:52.664Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41688 vulnerable 2026-06-08 06:43:54.860718 Cleartext Storage of Sensitive Information Vulnerability
This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due lack of encryption in storing of usernames and passwords within the router's firmware/ database. An attacker with physical access could exploit this by extracting the firmware and reverse engineer the binary data to access the plaintext credentials on the vulnerable system. Successful exploitation of this vulnerability could allow the attacker to gain unauthorized access to the targeted system.
Published: 2024-07-26T11:56:03.174Z
Updated: 2024-08-02T04:46:52.664Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41687 vulnerable 2026-06-08 06:43:54.860274 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41686 vulnerable 2026-06-08 06:43:54.859651 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41685 vulnerable 2026-06-08 06:43:54.858932 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41684 vulnerable 2026-06-08 06:43:54.856263 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.