PatchTheCVEsyrotech vulnerabilities
Recent CVEs affecting syrotech products. 9 tracked.
syrotech has 9 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-11-25. Highest priority: CVE-2024-41685 (score 42/100).
- CVE-2025-63729 CRITICAL 9.0 MITIGATE An issue was discovered in Syrotech SY-GPON-1110-WDONT SYRO_3.7L_3.1.02-240517 allowing attackers to exctract
- CVE-2024-41691 MEDIUM 4.6 MITIGATE This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to storing of FTP credentials in plaintext
- CVE-2024-41690 MEDIUM 4.6 MITIGATE This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to storing of default username and passwor
- CVE-2024-41689 MEDIUM 4.6 MITIGATE This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to unencrypted storing of WPA/ WPS credent
- CVE-2024-41688 MEDIUM 4.6 MITIGATE This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due lack of encryption in storing of usernames
- CVE-2024-41687 HIGH 7.5 MITIGATE This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to transmission of password in plain text
- CVE-2024-41686 LOW 3.3 MITIGATE This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to improper implementation of password pol
- CVE-2024-41685 HIGH 7.5 MITIGATE This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to missing HTTPOnly flag for the session c
- CVE-2024-41684 MEDIUM 5.3 MITIGATE This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to missing secure flag for the session coo
FAQ
How do I fix syrotech vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is syrotech being exploited right now?
None of the tracked syrotech CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which syrotech CVE should I patch first?
CVE-2024-41685 currently ranks highest (42/100): This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to missing HTTPOnly flag for the session c.