PT-2026-1679 · V Sol · V-Sol Gpon/Epon Olt Platform

CVE-2019-25282 · Publicado 2026-01-07 · Atualizado 2026-01-08

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions V-SOL GPON/EPON OLT Platform versions 2.03 and 2.03.62R IPv6

Description The V-SOL GPON/EPON OLT Platform is affected by an open redirect issue in the script. This allows attackers to manipulate the parent GET parameter and redirect logged-in users to arbitrary websites due to improper input validation in the redirect mechanism. The issue involves the bindProfile.html script.

Recommendations Versions prior to 2.03.62R IPv6 should be updated. Versions 2.03 and 2.03.62R IPv6 should ensure proper input validation for the parent GET parameter to prevent redirection to malicious websites.

Exploit

Correção

Open Redirect

Enumeração de Fraquezas

CWE-601

Identificadores relacionados

CVE-2019-25282

Produtos afetados

V-Sol Gpon/Epon Olt Platform

Referências · 8

• 🔥 https://packetstormsecurity.com/files/154628 · Exploit
• https://t.me/CVEtracker/41644 · Publicação no Telegram
• https://t.me/cveNotify/148026 · Publicação no Telegram
• https://zeroscience.mk/en/vulnerabilities/ZSL-2019-5535.php · Nota
• https://vsolcn.com · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-25282 · Nota de Segurança
• https://cxsecurity.com/issue/WLB-2019090193 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/167772 · Nota