HIGH
V-SOL GPON/EPON OLT Platform 2.03 Privilege Escalation via User Role Parameter
Published Dec 24, 2025
8.7
HIGHCVSS 4.0
EPSS 0.36%
Description
V-SOL GPON/EPON OLT Platform v2.03 contains a privilege escalation vulnerability that allows normal users to gain administrative access by manipulating the user role parameter. Attackers can send a crafted HTTP POST request to the user management endpoint with 'user_role_mod' set to integer value '1' to elevate their privileges.
Affected products
- Vendor Guangzhou V-SOLUTION Electronic Technology Co., Ltd. Product SOL GPON/EPON OLT Platform Defaultunknown
Affected
- 2.03
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
| Vendor | Product | Default status | Versions |
|---|---|---|---|
| Guangzhou V-SOLUTION Electronic Technology Co., Ltd. | SOL GPON/EPON OLT Platform | unknown | Affected
|
No data.
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (4)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-205323 Advisory
- https://www.exploit-db.com/exploits/47435 exploit
- https://www.vsolcn.com product
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5538.php exploitthird-party-advisory
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-205323 | Advisory | |
| https://www.exploit-db.com/exploits/47435 | exploit | |
| https://www.vsolcn.com | product | |
| https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5538.php | exploitthird-party-advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner VulnCheck
Published Dec 24, 2025
Updated Dec 24, 2025
Reserved Dec 24, 2025
Link CVE-2019-25237
CISA Vulnrichment
Updated Dec 24, 2025
Red Hat
No data
GitHub
No data