Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2019-25282

V-SOL GPON/EPON OLT Platform V2.03.62R_IPv6 v2.03 Open Redirect via bindProfile.html

Description

V-SOL GPON/EPON OLT Platform v2.03 contains an open redirect vulnerability in the script that allows attackers to manipulate the 'parent' GET parameter. Attackers can craft malicious links that redirect logged-in users to arbitrary websites by exploiting improper input validation in the redirect mechanism.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Guangzhou V V-SOL GPON/EPON OLT Platform

  • V2.03.62R_IPv6affected
  • V2.03.54Raffected
  • V2.03.52Raffected
  • V2.03.49affected
  • V2.03.47affected
  • V2.03.40affected
  • V2.03.26affected
  • V2.03.24affected
  • V1.8.6affected
  • V1.4affected

References