HackDig : Dig high-quality web security articles for hackers

V-SOL GPON/EPON OLT Platform v2.03 Reflected XSS Vulnerability

2019-10-18 00:00
Title: V-SOL GPON/EPON OLT Platform v2.03 Reflected XSS Vulnerability
Advisory ID: ZSL-2019-5537
Type: Local/Remote
Impact: Cross-Site Scripting
Risk: (3/5)
Release Date: 26.09.2019
Summary
GPON is currently the leading FTTH standard in broadband accesstechnology being widely deployed by service providers around the world.GPON/EPON OLT products are 1U height 19 inch rack mount products. Thefeatures of the OLT are small, convenient, flexible, easy to deploy, highperformance. It is appropriate to be deployed in compact room environment.The OLTs can be used for 'Triple-Play', VPN, IP Camera, Enterprise LAN andICT applications.
Description
The application is prone to multiple reflected cross-site scriptingvulnerabilities due to a failure to properly sanitize user-supplied inputto several parameters that are handled by various scripts. Attackers canexploit this issue to execute arbitrary HTML and script code in a user'sbrowser session.
Vendor
Guangzhou V-SOLUTION Electronic Technology Co., Ltd. - https://www.vsolcn.com
Affected Version
V2.03.62R_IPv6
V2.03.54R
V2.03.52R
V2.03.49
V2.03.47
V2.03.40
V2.03.26
V2.03.24
V1.8.6
V1.4
Tested On
GoAhead-Webs
Vendor Status
N/A
PoC
gpon_olt_xss.txt
Credits
Vulnerability discovered by Gjoko Krstic - <gjoko@zeroscience.mk>
References
[1] https://packetstormsecurity.com/files/154631
[2] https://exchange.xforce.ibmcloud.com/vulnerabilities/167864
[3] https://cxsecurity.com/issue/WLB-2019090194
Changelog
[26.09.2019] - Initial release
[03.10.2019] - Added reference [1], [2] and [3]
Contact
Zero Science Lab

Web: http://www.zeroscience.mk
e-mail: lab@zeroscience.mk


Source: php.7355-9102-LSZ/seitilibarenluv/ne/km.ecneicsorez.www

Read:2155 | Comments:0 | Tags: Xss Vulnerability

“V-SOL GPON/EPON OLT Platform v2.03 Reflected XSS Vulnerability”0 Comments

Submit A Comment

Name:

Email:

Blog :

Verification Code:

Announce

Share high-quality web security related articles with you:)

Tools

Tag Cloud