CVE-2025-63729

CRITICAL

Syrotech SY-GPON-1110-WDONT SYRO_3.7L_3.1.02-240517 - Info Disclosure

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2025-63729. PoCs published by Yashodhanvivek.

AI-analyzed exploit summary The repository contains only a README.md file with minimal information about CVE-2025-63729, lacking any exploit code or technical details. It appears to be a placeholder or stub for a proof-of-concept.

Description

An issue was discovered in Syrotech SY-GPON-1110-WDONT SYRO_3.7L_3.1.02-240517 allowing attackers to exctract the SSL Private Key, CA Certificate, SSL Certificate, and Client Certificates in .pem format in firmware in etc folder.

Exploits (1)

nomisec STUB
by Yashodhanvivek · poc
https://github.com/Yashodhanvivek/CVE-2025-63729-Syrotech-SY-GPON-1110-

The repository contains only a README.md file with minimal information about CVE-2025-63729, lacking any exploit code or technical details. It appears to be a placeholder or stub for a proof-of-concept.

Classification
Stub 90%
Attack Type
Other
Complexity
Trivial
Reliability
Theoretical
Target: Syrotech SY-GPON-1110
No auth needed
Prerequisites: none
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1

Scores

CVSS v3 9.0
EPSS 0.0008
EPSS Percentile 0.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-532 CWE-200 CWE-312
Status published
Products (1)
syrotech/sy-gpon-1110-wdont_firmware 3.1.02-240517
Published Nov 25, 2025
Tracked Since Feb 18, 2026