CVE-2019-25239

HIGH

V-SOL GPON/EPON OLT Platform 2.03 - Info Disclosure

Title source: llm

Description

V-SOL GPON/EPON OLT Platform 2.03 contains an unauthenticated information disclosure vulnerability that allows attackers to download configuration files via direct object reference. Attackers can retrieve sensitive configuration data by sending HTTP GET requests to the usrcfg.conf endpoint, potentially enabling authentication bypass and system access.

Exploits (1)

exploitdb WORKING POC

by LiquidWorm · textwebappshardware

https://www.exploit-db.com/exploits/47433

View Code ZIP pw:eip

References (3)

[Various Sources] https://www.vsolcn.com

[Third Party Advisory] https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5534.php

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/47433

Scores

CVSS v3 7.5

EPSS 0.0012

EPSS Percentile 30.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation poc

Automatable yes

Technical Impact partial

Details

CWE

CWE-552

Status published

Products (10)

Guangzhou V-SOLUTION Electronic Technology/GPON/EPON OLT Platform V1.4

Guangzhou V-SOLUTION Electronic Technology/GPON/EPON OLT Platform V1.8.6

Guangzhou V-SOLUTION Electronic Technology/GPON/EPON OLT Platform V2.03.24

Guangzhou V-SOLUTION Electronic Technology/GPON/EPON OLT Platform V2.03.26

Guangzhou V-SOLUTION Electronic Technology/GPON/EPON OLT Platform V2.03.40

Guangzhou V-SOLUTION Electronic Technology/GPON/EPON OLT Platform V2.03.47

Guangzhou V-SOLUTION Electronic Technology/GPON/EPON OLT Platform V2.03.49

Guangzhou V-SOLUTION Electronic Technology/GPON/EPON OLT Platform V2.03.52R

Guangzhou V-SOLUTION Electronic Technology/GPON/EPON OLT Platform V2.03.54R

Guangzhou V-SOLUTION Electronic Technology/GPON/EPON OLT Platform V2.03.62R_IPv6

Published Dec 24, 2025

Tracked Since Feb 18, 2026