CVE-2025-10957CWE-284broken-access-control

CVE-2025-10957

published September 25, 2025

CVSS
8.7
EPSS
0%
Percentile
24.8
In the wild
Unconfirmed
What it is

This vulnerability exists in the Syrotech SY-GPON-2010-WADONT router due to improper access control in its FTP service. A remote attacker could exploit this vulnerability by establishing an FTP connection using default credentials, potentially gaining unauthorized access to configuration files, user credentials, or other sensitive information stored on the targeted device.

The record
Technical detail
CVSS
8.7 · NONE
CVSS v4.0
Not supplied
EPSS
0.00329 · 24.8th percentile
Weakness
CWE-284 · Improper Access Control
Published
2025-09-25T16:15Z
References (1)
EPSS history
Timeline
  • 25 SEP 11:43Z
    Unrestricted FTP Access Vulnerability in Syrotech Router
    cvelistv5