CVE-2026-27753CWE-307

SODOLA SL902-SWTGW124AS <= 200.1.20 Improper Login Rate Limiting

Medium · published February 27, 2026

CVSS v4.0
6.9
EPSS
0%
Percentile
40.7
In the wild
Unconfirmed
What it is

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain an authentication bypass vulnerability that allows remote attackers to perform unlimited login attempts against the management interface. Attackers can conduct online password guessing attacks without account lockout or rate limiting restrictions to gain unauthorized access to the device management interface.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00484 · 40.7th percentile
Weakness
CWE-307 · Improper Restriction of Excessive Authentication Attempts
Published
2026-02-27T18:09Z
EPSS history
Timeline
  • 27 FEB 18:09Z
    SODOLA SL902-SWTGW124AS <= 200.1.20 Improper Login Rate Limiting
    cvelistv5