CVE-2026-27755: SODOLA SL902-SWTGW124AS <= 200.1.20 Predictable Session ID

Description

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a weak session identifier generation vulnerability that allows attackers to forge authenticated sessions by computing predictable MD5-based cookies. Attackers who know or guess valid credentials can calculate the session identifier offline and bypass authentication without completing the login flow, gaining unauthorized access to the device.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack vector

Network

Complexity

Low

Privileges

None

User interaction

None

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.5% · higher than 40% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

SS

SODOLA SL902-SWTGW124AS · Shenzhen Hongyavision Technology Co., Ltd. (Sodola Networks)

through 200.1.20 · source: vendor

SF

Sl902-swtgw124as Firmware · Sodola-network

through 200.1.20 · source: NVD