CVE-2024-41689

Name of the Vulnerable Software and Affected Versions SyroTech SY-GPON-1110-WDONT Router (affected versions not specified)

Description This issue exists due to the unencrypted storage of WPA/WPS credentials within the router's firmware/database. An attacker with physical access could exploit this by extracting the firmware and reverse-engineering the binary data to access the plaintext WPA/WPS credentials. Successful exploitation could allow the attacker to bypass WPA/WPS and gain access to the Wi-Fi network of the targeted system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.