9
/ 10
CRITICAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
Description
An issue was discovered in Syrotech SY-GPON-1110-WDONT SYRO_3.7L_3.1.02-240517 allowing attackers to extract the SSL Private Key, CA Certificate, SSL Certificate, and Client Certificates in .pem format in firmware in etc folder.
AI Analysis
Extraction of sensitive certificates and private key
Basic Information
ID
CVE-2025-63729
Source
mitre
Published
Nov 25, 2025 at 00:00
Modified
Nov 25, 2025 at 16:54
Affected Product
Vendor
Syrotech
Product
SY-GPON-1110-WDONT
Version
SYRO_3.7L_3.1.02-240517
Affected Versions
n/a n/a n/a
CWE Classification
AI Assessment
AI Score
9 / 10
AI Severity
Critical
Vendor
Syrotech
Product
SY-GPON-1110-WDONT
Version
SYRO_3.7L_3.1.02-240517