Vulnerabilidades do Guangzhou V-SOLUTION Electronic Technology SOL GPON/EPON OLT Platform

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Guangzhou V-SOLUTION Electronic Technology SOL GPON/EPON OLT Platform: 2 registro(s), com versões afetadas e correções.

CVE-2019-25238 Média · 4.3 CWE-352 24/12/2025

V-SOL GPON/EPON OLT Platform 2.03 Cross-Site Request Forgery Vulnerability

V-SOL GPON/EPON OLT Platform 2.03 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent. Attackers can craft malicious web pages to create admin users, enable SSH, or modify system settings by tricking authenticated administrators into loading a specially crafted page.

CVE-2019-25237 Crítica · 9.8 CWE-863 24/12/2025

V-SOL GPON/EPON OLT Platform 2.03 Privilege Escalation via User Role Parameter

V-SOL GPON/EPON OLT Platform v2.03 contains a privilege escalation vulnerability that allows normal users to gain administrative access by manipulating the user role parameter. Attackers can send a crafted HTTP POST request to the user management endpoint with 'user_role_mod' set to integer value '1' to elevate their privileges.