CVE-2024-41686 - CVE House
Back to Database
Status published High CVE-2024-41686

Password Policy Bypass Vulnerability

Vulnerability Description

This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to improper implementation of password policies. A local attacker could exploit this by creating password that do not adhere to the defined security standards/policy on the vulnerable system. Successful exploitation of this vulnerability could allow the attacker to expose the router to potential security threats.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-41686

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • These vulnerabilities are discovered by Shravan Singh, Rahul Giri, & Karan Patel from Redfox Cyber Security Inc, Toronto, Canada.

References

More from SyroTech

View All →
CVE-2024-41692
Incorrect Access Control Vulnerability
High 8.6
CVE-2024-41691
Insecure Storage of Sensitive Information Vulnerability
High 7
CVE-2024-41690
Default Credential Storage in Plaintext Vulnerability
High 7
CVE-2024-41689
Hard-coded Credentials Vulnerability
Medium 5.2
CVE-2024-41688
Cleartext Storage of Sensitive Information Vulnerability
High 7

Affected Vendor

Affected Software

SyroTech SY-GPON-1110-WDONT router
Vulnerable Versions:
3.1.02-231102

Timeline

Official Publish: July 26th, 2024
Last Modified: August 2nd, 2024
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-179

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.