Shenzhen Hongyavision Technology SODOLA SL902-SWTGW124AS up to 200.1.20 Session Cookie weak hash

Summaryinfo

A vulnerability was found in Shenzhen Hongyavision Technology SODOLA SL902-SWTGW124AS up to 200.1.20. It has been rated as critical. Affected is an unknown function of the component Session Cookie Handler. The manipulation leads to weak hash. This vulnerability is referenced as CVE-2026-27754. Remote exploitation of the attack is possible. No exploit is available.

Detailsinfo

A vulnerability was found in Shenzhen Hongyavision Technology SODOLA SL902-SWTGW124AS up to 200.1.20 and classified as critical. This issue affects an unknown function of the component Session Cookie Handler. The manipulation with an unknown input leads to a weak hash vulnerability. Using CWE to declare the problem leads to CWE-328. The product uses an algorithm that produces a digest (output value) that does not meet security expectations for a hash function that allows an adversary to reasonably determine the original input (preimage attack), find another input that can produce the same hash (2nd preimage attack), or find multiple inputs that evaluate to the same hash (birthday attack). Impacted is confidentiality, integrity, and availability. The summary by CVE is:

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 use the cryptographically broken MD5 hash function for session cookie generation, weakening session security. Attackers can exploit predictable session tokens combined with MD5's collision vulnerabilities to forge valid session cookies and gain unauthorized access to the device.

The weakness was published by Kazuma Matsumoto. It is possible to read the advisory at sodola-network.com. The identification of this vulnerability is CVE-2026-27754 since 02/23/2026. The exploitation is known to be difficult. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1600.001 according to MITRE ATT&CK.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2026-9044). Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Vendor

• Shenzhen Hongyavision Technology

Name

• SODOLA SL902-SWTGW124AS

Version

• 200.1.0
• 200.1.1
• 200.1.2
• 200.1.3
• 200.1.4
• 200.1.5
• 200.1.6
• 200.1.7
• 200.1.8
• 200.1.9
• 200.1.10
• 200.1.11
• 200.1.12
• 200.1.13
• 200.1.14
• 200.1.15
• 200.1.16
• 200.1.17
• 200.1.18
• 200.1.19
• 200.1.20

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion