CVE-2026-27751CWE-1392

SODOLA SL902-SWTGW124AS <= 200.1.20 Use of Default Credentials

Critical · published February 27, 2026

CVSS v4.0
9.3
EPSS
1%
Percentile
50.8
In the wild
Unconfirmed
What it is

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a default credentials vulnerability that allows remote attackers to obtain administrative access to the management interface. Attackers can authenticate using the hardcoded default credentials without password change enforcement to gain full administrative control of the device.

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00655 · 50.8th percentile
Weakness
CWE-1392 · Use of Default Credentials
Published
2026-02-27T18:07Z
EPSS history
Timeline
  • 27 FEB 18:07Z
    SODOLA SL902-SWTGW124AS <= 200.1.20 Use of Default Credentials
    cvelistv5