CVE-2024-41692 - CVE House
Back to Database
Status published High CVE-2024-41692

Incorrect Access Control Vulnerability

Vulnerability Description

This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to presence of root terminal access on a serial interface without proper access control. An attacker with physical access could exploit this by accessing the root shell on the vulnerable system. Successful exploitation of this vulnerability could allow the attacker to execute arbitrary commands with root privileges on the targeted system.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-41692

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • These vulnerabilities are discovered by Shravan Singh, Rahul Giri, & Karan Patel from Redfox Cyber Security Inc, Toronto, Canada.

References

More from SyroTech

View All →
CVE-2024-41691
Insecure Storage of Sensitive Information Vulnerability
High 7
CVE-2024-41690
Default Credential Storage in Plaintext Vulnerability
High 7
CVE-2024-41689
Hard-coded Credentials Vulnerability
Medium 5.2
CVE-2024-41688
Cleartext Storage of Sensitive Information Vulnerability
High 7
CVE-2024-41687
Cleartext Transmission of Sensitive Information Vulnerability
High 8.6

Affected Vendor

Affected Software

SyroTech SY-GPON-1110-WDONT router
Vulnerable Versions:
3.1.02-231102

Timeline

Official Publish: July 26th, 2024
Last Modified: August 2nd, 2024
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-1191

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.