Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2019-25237

V-SOL GPON/EPON OLT Platform 2.03 Privilege Escalation via User Role Parameter

Description

V-SOL GPON/EPON OLT Platform v2.03 contains a privilege escalation vulnerability that allows normal users to gain administrative access by manipulating the user role parameter. Attackers can send a crafted HTTP POST request to the user management endpoint with 'user_role_mod' set to integer value '1' to elevate their privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Guangzhou V-SOLUTION Electronic Technology Co., Ltd. SOL GPON/EPON OLT Platform

  • 2.03affected

References