Paper/Archive/CVE-2025-63729

CVE-2025-63729

mitre — An issue was discovered in Syrotech SY-GPON-1110-WDONT SYRO_3.7L_3.1.02-240517 allowing attackers to exctract the SSL Private Key, CA Cer…

EPSS 0.1%public exploit CVSS 9.0

critical.is priorityof 100

CVSS 9.0 (ADP)9.0 / 10 × 3027.0 Not in CISA KEV+300.0 EPSS percentile 0.5.005 × 200.1 Exploit: SSVC poc+1010.0 SSVC exploitation: poc+100.0

Description · from the CVE record

An issue was discovered in Syrotech SY-GPON-1110-WDONT SYRO_3.7L_3.1.02-240517 allowing attackers to exctract the SSL Private Key, CA Certificate, SSL Certificate, and Client Certificates in .pem format in firmware in etc folder.

Affected

ProductAffectedFixed inSource

n/an/a–CNA

Scores by source

CISA ADP9.0CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: partial

References

refgithub.com/Yashodhanvivek/CVE-2025-63729-Syrotech-SY-GPON-1110-/blob/main/Syrotech_SY-GPON-1110-WDONT_Security_Assessment.pdf