CVE-2025-1615: fallo de gravedad media en FiberHome AN5506-01A ONU GPON
FiberHome AN5506-01A ONU GPON NAT Submenu cross site scripting
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 4.8epss 0.6%
A vulnerability classified as problematic was found in FiberHome AN5506-01A ONU GPON RP2511. Affected by this vulnerability is an unknown functionality of the component NAT Submenu. The manipulation of the argument Description leads to cross site scripting. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Productos afectados
FiberHome · AN5506-01A ONU GPONCVEs relacionadas — FiberHome AN5506-01A ONU GPON
En el mismo producto, de las más peligrosas a las menos.
CVE-2025-1616MEDIUMFiberHome AN5506-01A ONU GPON Diagnosis os command injectionEPSS 7.7%CVE-2025-1614MEDIUMFiberHome AN5506-01A ONU GPON Port Forwarding Submenu portForwardingCfg cross site scriptingEPSS 0.8%CVE-2025-1613MEDIUMFiberHome AN5506-01A ONU GPON URL Filtering Submenu URL_filterCfg cross site scriptingEPSS 0.8%