CVE-2025-63409

Privilege escalation and improper access control in GCOM EPON 1GE C00R371V00B01 allows remote authenticated users to modify administrator only settings and extract administrator credentials.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2026-02-24

Last modified

2026-07-05

Weaknesses

CWE-284

Affected products

• Gcom Epon 1ge Firmware (Gcomtw)

References

• https://github.com/theShinigami/CVE-Disclosures/tree/main/CVE-2025-63409