PT-2026-1679 · V Sol · V-Sol Gpon/Epon Olt Platform

Published 2026-01-07 · Updated 2026-01-08 · CVE-2019-25282

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions V-SOL GPON/EPON OLT Platform versions 2.03 and 2.03.62R IPv6

Description The V-SOL GPON/EPON OLT Platform is affected by an open redirect issue in the script. This allows attackers to manipulate the parent GET parameter and redirect logged-in users to arbitrary websites due to improper input validation in the redirect mechanism. The issue involves the bindProfile.html script.

Recommendations Versions prior to 2.03.62R IPv6 should be updated. Versions 2.03 and 2.03.62R IPv6 should ensure proper input validation for the parent GET parameter to prevent redirection to malicious websites.

Exploit

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2019-25282

Affected Products

V-Sol Gpon/Epon Olt Platform

References · 8

• 🔥 https://packetstormsecurity.com/files/154628 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25282 · Security Note
• https://t.me/CVEtracker/41644 · Telegram Post
• https://t.me/cveNotify/148026 · Telegram Post
• https://zeroscience.mk/en/vulnerabilities/ZSL-2019-5535.php · Note
• https://vsolcn.com · Note
• https://cxsecurity.com/issue/WLB-2019090193 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/167772 · Note