High severity7.5NVD Advisory· Published Dec 24, 2025· Updated Apr 15, 2026
CVE-2019-25239
CVE-2019-25239
Description
V-SOL GPON/EPON OLT Platform 2.03 contains an unauthenticated information disclosure vulnerability that allows attackers to download configuration files via direct object reference. Attackers can retrieve sensitive configuration data by sending HTTP GET requests to the usrcfg.conf endpoint, potentially enabling authentication bypass and system access.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: = 2.03
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.