nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2025-1614 CVE-2025-1614
MEDIUM
FiberHome AN5506-01A ONU GPON Port Forwarding Submenu portForwardingCfg cross site scripting
Record summary
CVE-2025-1614 has a selected CVSS score of 4.8 (medium).
Description
A vulnerability classified as problematic has been found in FiberHome AN5506-01A ONU GPON RP2511. Affected is an unknown function of the file /goform/portForwardingCfg of the component Port Forwarding Submenu. The manipulation of the argument pf_Description leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Feb 24, 2025 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
AN5506-01A ONU GPONBrowse FiberHome / AN5506-01A ONU GPON | CVE List | RP2511 | affected |
References
4VDB-296604 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions required
https://vuldb.com/?ctiid.296604 VDB-296604 | FiberHome AN5506-01A ONU GPON Port Forwarding Submenu portForwardingCfg cross site scriptingvdb entryTechnical description
https://vuldb.com/?id.296604 Submit #501365 | FiberHome AN5506-01A ONU GPON RP2511 Cross Site ScriptingThird-party advisory
https://vuldb.com/?submit.501365