CVE Radar Logo
CVERadar
CVE Radar Logo
CVERadar

CVE-2024-41691

High Severity
Syrotech
SVRS
47/100

CVSSv3
4.6/10

EPSS
0.00033/1

CVE-2024-41691: Plaintext FTP credentials found in SyroTech router firmware. This vulnerability allows an attacker with physical access to the SY-GPON-1110-WDONT router to extract the firmware, reverse engineer it, and obtain the plaintext FTP credentials. Although the CVSS score is 4.6, indicating medium severity, the SOCRadar Vulnerability Risk Score (SVRS) is 47. This highlights the potential for exploitation, especially given the "In The Wild" tag. Successful exploitation grants unauthorized FTP server access. While not immediately critical (SVRS < 80), the ease of access to credentials makes it a significant security risk. Prompt firmware updates or router replacement are recommended to mitigate this vulnerability.

In The Wild
CVSS:3.1
AV:P
AC:L
PR:N
UI:N
S:U
C:H
I:N
A:N
2024-07-26

2024-08-05

Indicators of Compromise

No IOCs found for this CVE

Exploits

No exploits found for this CVE

Enhance Your CVE Management with SOCRadar Vulnerability Intelligence
Get comprehensive CVE details, real-time notifications, and proactive threat management all in one platform.
CVE Details
Access comprehensive CVE information instantly
Real-time Tracking
Subscribe to CVEs and get instant updates
Exploit Analysis
Monitor related APT groups and threats
IOC Tracking
Analyze and track CVE-related IOCs

News

CVE-2024-41691 | SyroTech SY-GPON-1110-WDONT 3.1.02-231102 FTP Credentials cleartext storage (CIVN-2024-0225)
vuldb.com2024-07-26
CVE-2024-41691 | SyroTech SY-GPON-1110-WDONT 3.1.02-231102 FTP Credentials cleartext storage (CIVN-2024-0225) | A vulnerability has been found in SyroTech SY-GPON-1110-WDONT 3.1.02-231102 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component FTP Credentials Handler. The manipulation leads to cleartext storage of sensitive information. This vulnerability is known as CVE-2024-41691</a
cve-2024-41691
domains
urls
cves

Social Media

🚨 CVE-2024-41691: SyroTech SY-GPON-1110-WDONT FTP credentials stored in cleartext. Sensitive data exposure risk. Patch immediately &amp; review FTP config. #InfoSec #NetworkSecurity
0
0
0

Affected Software

Configuration 1
TypeVendorProduct
OSSyrotechsy-gpon-1110-wdont_firmware

References

ReferenceLink
[email protected]https://cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&amp;VLCODE=CIVN-2024-0225
[email protected]https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&amp;VLCODE=CIVN-2024-0225

CWE Details

CWE IDCWE NameDescription
CWE-312Cleartext Storage of Sensitive InformationThe application stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

CVE Radar

Real-time CVE Intelligence & Vulnerability Management Platform

CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.

Get Free Vulnerability Intelligence AccessAccess real-time CVE monitoring, exploit analysis, and threat intelligence