Description
V-SOL GPON/EPON OLT Platform v2.03 contains a privilege escalation vulnerability that allows normal users to gain administrative access by manipulating the user role parameter. Attackers can send a crafted HTTP POST request to the user management endpoint with 'user_role_mod' set to integer value '1' to elevate their privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Guangzhou V-SOLUTION Electronic Technology | SOL GPON/EPON OLT Platform | 2.03 | — |
References
- ExploitDB-47435 exploit
- V-SOL Official Product Homepage product
- Zero Science Lab Disclosure (ZSL-2019-5538) third-party-advisory