What’s Vulnerable › Vulnerabilities

CVE-2019-25282: V-SOL GPON/EPON OLT Platform V2.03.62R_IPv6 v2.03 Open Redirect via bindProfile.html

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-01-08 · updated 2026-06-17
• Weakness: CWE-601

Description

V-SOL GPON/EPON OLT Platform v2.03 contains an open redirect vulnerability in the script that allows attackers to manipulate the 'parent' GET parameter. Attackers can craft malicious links that redirect logged-in users to arbitrary websites by exploiting improper input validation in the redirect mechanism.

Affected products

• Guangzhou V V-SOL GPON/EPON OLT Platform: V2.03.62R_IPv6, V2.03.54R, V2.03.52R, V2.03.49, V2.03.47, V2.03.40 (+4)

References

• https://cxsecurity.com/issue/WLB-2019090193
• https://exchange.xforce.ibmcloud.com/vulnerabilities/167772
• https://packetstormsecurity.com/files/154628
• https://www.vsolcn.com/
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5535.php

Get alerted when CVE-2019-25282 or the next vulnerability affects your stack