What’s Vulnerable › Vulnerabilities

CVE-2019-25239: V-SOL GPON/EPON OLT Platform 2.03 Unauthenticated Configuration Download

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-24 · updated 2026-06-17
• Weakness: CWE-552

Description

V-SOL GPON/EPON OLT Platform 2.03 contains an unauthenticated information disclosure vulnerability that allows attackers to download configuration files via direct object reference. Attackers can retrieve sensitive configuration data by sending HTTP GET requests to the usrcfg.conf endpoint, potentially enabling authentication bypass and system access.

Affected products

• Guangzhou V-SOLUTION Electronic Technology GPON/EPON OLT Platform: V2.03.62R_IPv6, V2.03.54R, V2.03.52R, V2.03.49, V2.03.47, V2.03.40 (+4)

References

• https://www.exploit-db.com/exploits/47433
• https://www.vsolcn.com
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5534.php
• https://www.exploit-db.com/exploits/47433
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5534.php

Get alerted when CVE-2019-25239 or the next vulnerability affects your stack