SODOLA SL902-SWTGW124AS Authentication Vulnerability Allowing Unverified Password Changes
Vulnerability
An authentication vulnerability has been identified in SODOLA SL902-SWTGW124AS firmware versions through 200.1.20. This vulnerability allows authenticated users to change account passwords without verifying the current password. As a result, attackers who gain access to an authenticated session can modify credentials, ensuring persistent access to the management interface.
Impact
Exploitation of this vulnerability could lead to unauthorized password changes, allowing attackers to maintain access to the management interface.
Remediation
Users can upgrade to the latest firmware version, which is available on the SODOLA website. Instructions for upgrading the firmware are included in the SODOLA Managed Switch Web Manual.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.