Skip to content
OpenAdvisories
High · 8.6 CVE-2024-41692 EUVD-2024-39137GHSA-6572-8r92-7fjf

Incorrect Access Control Vulnerability

Published Jul 26, 2024 · Updated Aug 2, 2024 · Assigned by CERT-In

Description

This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to presence of root terminal access on a serial interface without proper access control. An attacker with physical access could exploit this by accessing the root shell on the vulnerable system.

Successful exploitation of this vulnerability could allow the attacker to execute arbitrary commands with root privileges on the targeted system.

Affected products

VendorProductAffectedFixed
SyroTech SyroTech SY-GPON-1110-WDONT router 3.1.02-231102 —

References