Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-43qf-qj5j-5r47

Опубликовано: 24 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 8.7
CVSS3: 7.5

Описание

V-SOL GPON/EPON OLT Platform 2.03 contains an unauthenticated information disclosure vulnerability that allows attackers to download configuration files via direct object reference. Attackers can retrieve sensitive configuration data by sending HTTP GET requests to the usrcfg.conf endpoint, potentially enabling authentication bypass and system access.

V-SOL GPON/EPON OLT Platform 2.03 contains an unauthenticated information disclosure vulnerability that allows attackers to download configuration files via direct object reference. Attackers can retrieve sensitive configuration data by sending HTTP GET requests to the usrcfg.conf endpoint, potentially enabling authentication bypass and system access.

EPSS

Процентиль: 27%
0.00095
Низкий

8.7 High

CVSS4

7.5 High

CVSS3

Дефекты

CWE-552

Связанные уязвимости

CVSS3: 7.5
nvd
около 2 месяцев назад

V-SOL GPON/EPON OLT Platform 2.03 contains an unauthenticated information disclosure vulnerability that allows attackers to download configuration files via direct object reference. Attackers can retrieve sensitive configuration data by sending HTTP GET requests to the usrcfg.conf endpoint, potentially enabling authentication bypass and system access.

EPSS

Процентиль: 27%
0.00095
Низкий

8.7 High

CVSS4

7.5 High

CVSS3

Дефекты

CWE-552