Description
V-SOL GPON/EPON OLT Platform v2.03 contains an open redirect vulnerability in the script that allows attackers to manipulate the 'parent' GET parameter. Attackers can craft malicious links that redirect logged-in users to arbitrary websites by exploiting improper input validation in the redirect mechanism.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Guangzhou V | V-SOL GPON/EPON OLT Platform | V2.03.62R_IPv6, V2.03.54R, V2.03.52R, V2.03.49, V2.03.47, V2.03.40, V2.03.26, V2.03.24, V1.8.6, V1.4 | — |
References
- Zero Science Lab Vulnerability Advisory third-party-advisory
- Packet Storm Security Exploit Entry exploit
- IBM X-Force Vulnerability Exchange vdb-entry
- CXSecurity Vulnerability Database Entry third-party-advisory
- VSOL Vendor Homepage product