Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
SODOLA SL902-SWTGW124AS <= 200.1.20 Unverified Password Change
Vulnerability Description
SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain an authentication vulnerability that allows authenticated users to change account passwords without verifying the current password. Attackers who gain access to an authenticated session can modify credentials to maintain persistent access to the management interface.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
Vulnerability Type
未经验证的口令修改
Vulnerability Title
SODOLA SL902-SWTGW124AS 安全漏洞
Vulnerability Description
SODOLA SL902-SWTGW124AS是西班牙SODOLA公司的一个工业交换机。 SODOLA SL902-SWTGW124AS 200.1.20及之前版本存在安全漏洞，该漏洞源于经过身份验证的用户无需验证当前密码即可更改账户密码，可能导致攻击者修改凭据以维持对管理界面的持久访问。
CVSS Information
N/A
Vulnerability Type
N/A