Vulnerability · Published Feb 27, 2026 · Assigned by VulnCheck

CVE-2026-27753SODOLA SL902-SWTGW124AS <= 200.1.20 Improper Login Rate Limiting

Medium 6.5

In plain English

A medium-severity security flaw in SODOLA SL902-SWTGW124AS from Shenzhen Hongyavision Technology Co., Ltd. (Sodola Networks). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 30% of all known vulnerabilities).

Severity (CVSS 3.1)6.5Medium

Exploit odds (30 days)0.4%top 69.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain an authentication bypass vulnerability that allows remote attackers to perform unlimited login attempts against the management interface. Attackers can conduct online password guessing attacks without account lockout or rate limiting restrictions to gain unauthorized access to the device management interface.

Affected products (as reported)

Vendor	Product	Versions
Shenzhen Hongyavision Technology Co., Ltd. (Sodola Networks)	SODOLA SL902-SWTGW124AS	0 – through 200.1.20

Weakness: CWE-307 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

In plain English

Official description

Affected products (as reported)

References