Vulnerabilidades de Guangzhou V-SOLUTION Electronic Technology
CVEs publicadas que afetam produtos de Guangzhou V-SOLUTION Electronic Technology: 3 registro(s), com severidade, exploração e correções.
CVE-2019-25239
Alta · 7.5
CWE-552 24/12/2025
V-SOL GPON/EPON OLT Platform 2.03 Unauthenticated Configuration Download
V-SOL GPON/EPON OLT Platform 2.03 contains an unauthenticated information disclosure vulnerability that allows attackers to download configuration files via direct object reference. Attackers can retrieve sensitive configuration data by sending HTTP GET requests to the usrcfg.conf endpoint, potentially enabling authentication bypass and system access.
CVE-2019-25238
Média · 4.3
CWE-352 24/12/2025
V-SOL GPON/EPON OLT Platform 2.03 Cross-Site Request Forgery Vulnerability
V-SOL GPON/EPON OLT Platform 2.03 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent. Attackers can craft malicious web pages to create admin users, enable SSH, or modify system settings by tricking authenticated administrators into loading a specially crafted page.
CVE-2019-25237
Crítica · 9.8
CWE-863 24/12/2025
V-SOL GPON/EPON OLT Platform 2.03 Privilege Escalation via User Role Parameter
V-SOL GPON/EPON OLT Platform v2.03 contains a privilege escalation vulnerability that allows normal users to gain administrative access by manipulating the user role parameter. Attackers can send a crafted HTTP POST request to the user management endpoint with 'user_role_mod' set to integer value '1' to elevate their privileges.