Dashboard / CVE-2025-63729

CVE-2025-63729

CRITICAL 1 PoC
INFO Priority: 0.01 BB Relevance: 63/100
Published: 2025-11-25 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Auth No Interaction Conf. Impact Integ. Impact Scope Change

CVSS Vector Breakdown

AV: Local
AC: Low
PR: None
UI: None
S: Changed
C: High
I: High
A: None

Description

An issue was discovered in Syrotech SY-GPON-1110-WDONT SYRO_3.7L_3.1.02-240517 allowing attackers to exctract the SSL Private Key, CA Certificate, SSL Certificate, and Client Certificates in .pem format in firmware in etc folder.

Weakness Classification (3)

Affected Software (1)

VendorProductVersion
syrotech sy-gpon-1110-wdont_firmware 3.1.02-240517

References & Advisories (1)

Proof of Concept (1)

—
https://github.com/Yashodhanvivek/CVE-2025-63729-Syrotech-SY-GPON-1110-
nomi-sec

Bug Bounty Relevance

63 / 100
✓ No authentication
✓ Low complexity
✓ No user interaction
✓ PoC available (1)

CVSS Score

9.0 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

EPSS — Exploitation Probability

0.09%
Raw Score 0.000930
Percentile 0.6%
Date 2026-11-14

EPSS Trend

2026-11-14
0.00093
2026-11-13
0.00093
2026-11-12
0.00093
2026-11-10
0.00093
2026-11-09
0.00093
2026-11-08
0.00093
2026-11-07
0.00093
2026-11-06
0.00093
2026-11-05
0.00093
2026-11-04
0.00093

Intelligence Sources

nvd ref →

External Links