Vulnerability Details CVE-2025-63409
Privilege escalation and improper access control in GCOM EPON 1GE C00R371V00B01 allows remote authenticated users to modify administrator only settings and extract administrator credentials.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 28.3%
CVSS Severity
CVSS v3 Score 8.8
Products affected by CVE-2025-63409
-
cpe:2.3:h:gcomtw:gcom_epon_1ge:-
-
cpe:2.3:o:gcomtw:gcom_epon_1ge_firmware:c00r371v00b01