CVE-2021-27372: Realtek Xpon RTL9601D Software Development Kit

Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days.

Realtek xPON RTL9601D SDK 1.9 stores passwords in plaintext which may allow attackers to possibly gain access to the device with root permissions via the build-in network monitoring tool and execute arbitrary commands.

Affected products

• Realtek Xpon RTL9601D Software Development Kit: version 1.9 only

Published 2021-03-25. Last modified 2026-06-17.