CVE-2019-25237 | BDVDB-2026-307495 Detail
Guangzhou V-SOLUTION Electronic TechnologySOL GPON/EPON OLT Platform
Description#
V-SOL GPON/EPON OLT Platform v2.03 contains a privilege escalation vulnerability that allows normal users to gain administrative access by manipulating the user role parameter. Attackers can send a crafted HTTP POST request to the user management endpoint with 'user_role_mod' set to integer value '1' to elevate their privileges.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact high, availability impact high. Attack vector: network.
Weaknesses#
- CWE-863 Incorrect Authorization
References#
Exploit#
History#
- Version 1Record published in the CVE List.