← CVE Intelligence

CVE-2024-41689

Hard-coded Credentials Vulnerability PUBLISHED

Description (CNA)

This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to unencrypted storing of WPA/ WPS credentials within the router's firmware/ database. An attacker with physical access could exploit this by extracting the firmware and reverse engineer the binary data to access the plaintext WPA/ WPS credentials on the vulnerable system. Successful exploitation of this vulnerability could allow the attacker to bypass WPA/ WPS and gain access to the Wi-Fi network of the targeted system.

Affected (CNA)

Vendor / productVersions
SyroTech / SyroTech SY-GPON-1110-WDONT routeraffected 3.1.02-231102

CWE

CWE-798

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.