Skip to content
OpenAdvisories
High · 7.3 CVE-2024-41686 EUVD-2024-39131GHSA-phh7-8q4v-gv55

Password Policy Bypass Vulnerability

Published Jul 26, 2024 · Updated Aug 2, 2024 · Assigned by CERT-In

Description

This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to improper implementation of password policies. A local attacker could exploit this by creating password that do not adhere to the defined security standards/policy on the vulnerable system.

Successful exploitation of this vulnerability could allow the attacker to expose the router to potential security threats.

Affected products

VendorProductAffectedFixed
SyroTech SyroTech SY-GPON-1110-WDONT router 3.1.02-231102 —

References