CVE-2025-63729

9.0 criticalEPSS 0.09%

Critical (9.0) in syrotech sy-gpon-1110-wdont firmware. EPSS 0.09% chance of exploitation in the next 30 days.

An issue was discovered in Syrotech SY-GPON-1110-WDONT SYRO_3.7L_3.1.02-240517 allowing attackers to exctract the SSL Private Key, CA Certificate, SSL Certificate, and Client Certificates in .pem format in firmware in etc folder.

Severity

CVSS 3.1

9.0 critical

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

EPSS: 0.09% chance of exploitation in the next 30 days; higher than 0% of CVEs (scores of 2026-10-31)
CWEs: CWE-200, CWE-312, CWE-532
Published: 2025-11-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

syrotech:sy-gpon-1110-wdont_firmware

References

https://github.com/Yashodhanvivek/CVE-2025-63729-Syrotech-SY-GPON-1110-/blob/main/Syrotech_SY-GPON-1110-WDONT_Security_Assessment.pdf

Check your stack JSON