Description (CNA)
V-SOL GPON/EPON OLT Platform v2.03 contains a privilege escalation vulnerability that allows normal users to gain administrative access by manipulating the user role parameter. Attackers can send a crafted HTTP POST request to the user management endpoint with 'user_role_mod' set to integer value '1' to elevate their privileges.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Guangzhou V-SOLUTION Electronic Technology Co., Ltd. / SOL GPON/EPON OLT Platform | affected 2.03 |
CWE
CWE-863
References
- https://www.exploit-db.com/exploits/47435
- https://www.vsolcn.com
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5538.php
ADP enrichment
No English description supplied.