PT-2026-21553 · Gcom · Gcom Epon 1Ge Onu
CVE-2025-71056
·
Publicado
2026-02-23
·
Atualizado
2026-02-28
CVSS v3.1
8.1
Alta
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
GCOM EPON 1GE ONU version C00R371V00B01
Description
The software suffers from improper session management, which enables attackers to hijack user sessions. This is achieved by spoofing the IP address of an authenticated user.
Recommendations
Update to a newer version that contains a fix for this vulnerability.
Exploit
Correção
Authentication Bypass by Spoofing
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Gcom Epon 1Ge Onu