CVE 9 CRITICAL

CVE-2025-63729_CVE-2025-63729

9 / 10
CRITICAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

Description

An issue was discovered in Syrotech SY-GPON-1110-WDONT SYRO_3.7L_3.1.02-240517 allowing attackers to extract the SSL Private Key, CA Certificate, SSL Certificate, and Client Certificates in .pem format in firmware in etc folder.

AI Analysis

Extraction of sensitive certificates and private key

Basic Information

ID CVE-2025-63729
Source mitre
Published Nov 25, 2025 at 00:00
Modified Nov 25, 2025 at 16:54

Affected Product

Vendor Syrotech
Product SY-GPON-1110-WDONT
Version SYRO_3.7L_3.1.02-240517
Affected Versions n/a n/a n/a

CWE Classification

AI Assessment

AI Score 9 / 10
AI Severity Critical
Vendor Syrotech
Product SY-GPON-1110-WDONT
Version SYRO_3.7L_3.1.02-240517

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.