CVE-2025-63729
9.0
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
Exploitability: 2.5 / Impact: 5.8
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)
Description
An issue was discovered in Syrotech SY-GPON-1110-WDONT SYRO_3.7L_3.1.02-240517 allowing attackers to exctract the SSL Private Key, CA Certificate, SSL Certificate, and Client Certificates in .pem format in firmware in etc folder.
Affected (1)
Products: Syrotech: Sy Gpon 1110 Wdont Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 3.1.02-240517 |
| Running on/with | Platform Versions |
|---|---|
Syrotech Sy Gpon 1110 Wdont | Version 3.7l |
Related CWEs
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
CWE-312
Cleartext Storage of Sensitive Information
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
CWE-532
Insertion of Sensitive Information into Log File
Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.
References (1)
Source: cve@mitre.org
ExploitThird Party Advisory
Timeline
No history available yet.