Guangzhou V-SOLUTION Electronic Technology vulnerabilities
Published CVEs affecting Guangzhou V-SOLUTION Electronic Technology products: 3 record(s), with severity, exploitation and fixes.
CVE-2019-25239
High · 7.5
CWE-552 Dec 24, 2025
V-SOL GPON/EPON OLT Platform 2.03 Unauthenticated Configuration Download
V-SOL GPON/EPON OLT Platform 2.03 contains an unauthenticated information disclosure vulnerability that allows attackers to download configuration files via direct object reference. Attackers can retrieve sensitive configuration data by sending HTTP GET requests to the usrcfg.conf endpoint, potentially enabling authentication bypass and system access.
CVE-2019-25238
Medium · 4.3
CWE-352 Dec 24, 2025
V-SOL GPON/EPON OLT Platform 2.03 Cross-Site Request Forgery Vulnerability
V-SOL GPON/EPON OLT Platform 2.03 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent. Attackers can craft malicious web pages to create admin users, enable SSH, or modify system settings by tricking authenticated administrators into loading a specially crafted page.
CVE-2019-25237
Critical · 9.8
CWE-863 Dec 24, 2025
V-SOL GPON/EPON OLT Platform 2.03 Privilege Escalation via User Role Parameter
V-SOL GPON/EPON OLT Platform v2.03 contains a privilege escalation vulnerability that allows normal users to gain administrative access by manipulating the user role parameter. Attackers can send a crafted HTTP POST request to the user management endpoint with 'user_role_mod' set to integer value '1' to elevate their privileges.