Description (CNA)
V-SOL GPON/EPON OLT Platform 2.03 contains an unauthenticated information disclosure vulnerability that allows attackers to download configuration files via direct object reference. Attackers can retrieve sensitive configuration data by sending HTTP GET requests to the usrcfg.conf endpoint, potentially enabling authentication bypass and system access.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Guangzhou V-SOLUTION Electronic Technology / GPON/EPON OLT Platform | affected V2.03.62R_IPv6; affected V2.03.54R; affected V2.03.52R; affected V2.03.49; affected V2.03.47; affected V2.03.40; affected V2.03.26; affected V2.03.24; affected V1.8.6; affected V1.4 |
CWE
CWE-552
References
- https://www.exploit-db.com/exploits/47433
- https://www.vsolcn.com
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5534.php
ADP enrichment
No English description supplied.