---
id: CVE-2025-10957
title: >-
  This vulnerability exists in the Syrotech SY-GPON-2010-WADONT router due to
  improper access control in its FTP service
summary: >-
  This vulnerability exists in the Syrotech SY-GPON-2010-WADONT router due to
  improper access control in its FTP service. A remote attacker could exploit
  this vulnerability by establishing an FTP connection using default
  credentials, poten…
severity: none
cwe:
  - CWE-284
published: '2025-09-25'
updated: '2026-10-11'
sourceUpdated: '2026-10-11T20:10:00.200'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-10957'
references:
  - url: >-
      https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2025-0223
    label: vdisclose@cert-in.org.in
tags:
  - nvd
epss: 0.00321
epssPercentile: 0.2322
ingestedAt: '2026-10-12T14:50:33.987Z'
---

## Overview

This vulnerability exists in the Syrotech SY-GPON-2010-WADONT router due to improper access control in its FTP service. A remote attacker could exploit this vulnerability by establishing an FTP connection using default credentials, potentially gaining unauthorized access to configuration files, user credentials, or other sensitive information stored on the targeted device.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.