Low severity · published Jul 26, 2024
CVE-2024-41686
Password Policy Bypass Vulnerability
3.3
CVSS
0.2%
EPSS
No
On KEV
Description
This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to improper implementation of password policies. A local attacker could exploit this by creating password that do not adhere to the defined security standards/policy on the vulnerable system. Successful exploitation of this vulnerability could allow the attacker to expose the router to potential security threats.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 5% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SS
SyroTech SY-GPON-1110-WDONT router · SyroTech
3.1.02-231102 · source: vendor
SF
Sy-gpon-1110-wdont Firmware · Syrotech
3.1.02-231102 · source: NVD, CISA
Affected product
SS
SyroTech SY-GPON-1110-WDONT router
SyroTech
More from SyroTech SY-GPON-1110-WDONT router
8.6
CVE-2024-41692
Incorrect Access Control Vulnerability
7.5
CVE-2024-41687
Cleartext Transmission of Sensitive Information Vulnerability
7.5
CVE-2024-41685
Cookie Without HTTPOnly Flag Set Vulnerability
5.3
CVE-2024-41684
Cookie Without Secure Flag Set Vulnerability
4.6
CVE-2024-41691
Insecure Storage of Sensitive Information Vulnerability