PT-2026-21553 · Gcom · Gcom Epon 1Ge Onu

Published 2026-02-23 · Updated 2026-02-28 · CVE-2025-71056

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions GCOM EPON 1GE ONU version C00R371V00B01

Description The software suffers from improper session management, which enables attackers to hijack user sessions. This is achieved by spoofing the IP address of an authenticated user.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Exploit

Fix

Authentication Bypass by Spoofing

Weakness Enumeration

CWE-290

Related Identifiers

CVE-2025-71056

Affected Products

Gcom Epon 1Ge Onu

References · 10

• 🔥 https://github.com/theShinigami/CVE-Disclosures/blob/main/CVE-2025-71056/README.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-71056 · Security Note
• https://twitter.com/CVEnew/status/2026265056908804434 · Twitter Post
• https://t.me/CVEtracker/45514 · Telegram Post
• https://johnbai.en.made-in-china.com/product/JXnENzmlJFpv/China-H18gn-Series-Gpon-Ont-ONU.html · Note
• https://twitter.com/cracbot/status/2027338103682482663 · Twitter Post
• http://szgcom.com · Note
• https://t.me/cveNotify/153525 · Telegram Post
• https://twitter.com/cracbot/status/2027700403526373888 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2026071932190289944 · Twitter Post