QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2019-25239

Back to search

CVE-2019-25239

Published: Dec 24, 2025

Modified: Dec 24, 2025

PUBLISHED

CVSS v3.1

7.5

HIGH

Description

V-SOL GPON/EPON OLT Platform 2.03 contains an unauthenticated information disclosure vulnerability that allows attackers to download configuration files via direct object reference. Attackers can retrieve sensitive configuration data by sending HTTP GET requests to the usrcfg.conf endpoint, potentially enabling authentication bypass and system access.

VendorProductVersions

Guangzhou V-SOLUTION Electronic Technology

GPON/EPON OLT Platform

affected
V2.03.62R_IPv6
affected
V2.03.54R
affected
V2.03.52R
affected
V2.03.49
affected
V2.03.47

+5 more versions

Weaknesses (CWE)

CWE-552

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now