CVE-2025-1614 FiberHome AN5506-01A ONU GPON Port Forwarding Submenu portForwardingCfg cross site scripting

A vulnerability classified as problematic has been found in FiberHome AN5506-01A ONU GPON RP2511. Affected is an unknown function of the file /goform/portForwardingCfg of the component Port Forwarding Submenu. The manipulation of the argument pfDescription leads to cross site scripting. It is...

CVE-2025-1613 FiberHome AN5506-01A ONU GPON URL Filtering Submenu URL_filterCfg cross site scripting

A vulnerability was found in FiberHome AN5506-01A ONU GPON RP2511. It has been rated as problematic. This issue affects some unknown processing of the file /goform/URLfilterCfg of the component URL Filtering Submenu. The manipulation of the argument urlIP leads to cross site scripting. The attack...

CVE-2025-1613 FiberHome AN5506-01A ONU GPON URL Filtering Submenu URL_filterCfg cross site scripting

A vulnerability was found in FiberHome AN5506-01A ONU GPON RP2511. It has been rated as problematic. This issue affects some unknown processing of the file /goform/URLfilterCfg of the component URL Filtering Submenu. The manipulation of the argument urlIP leads to cross site scripting. The attack...

CVE-2025-1613

CVE-2025-1613 affects FiberHome AN5506-01A ONU GPON RP2511, specifically the /goform/URL_filterCfg URL_FILTERING Submenu. The vulnerability arises from manipulation of the url_IP parameter, enabling cross-site scripting via that processing path. The issue is exploitable remotely and has been publ...

FiberHome AN5506-01A 代码注入漏洞

FiberHome AN5506-01A is a high-performance, low-power FTTH GPON optical network unit from China FiberHome. A code injection vulnerability exists in the FiberHome AN5506-01A ONU GPON RP2511, which originates from a cross-site scripting issue in the pfDescription parameter of the Port Forwarding...

FiberHome AN5506-01A 命令注入漏洞

FiberHome AN5506-01A is a high-performance, low-power FTTH GPON optical network unit from China FiberHome. A command injection vulnerability exists in the FiberHome AN5506-01A ONU GPON RP2511, which originates from the Destination Address parameter of the Diagnosis component containing an operati...

FiberHome AN5506-01A ONU GPON RP2511 代码注入漏洞

FiberHome AN5506-01A is a high-performance, low-power FTTH GPON optical network unit from China FiberHome. A code injection vulnerability exists in the FiberHome AN5506-01A ONU GPON RP2511, which stems from a cross-site scripting issue in the Description parameter of the NAT Submenu component...

CVE-2025-0869

A vulnerability was found in Cianet ONU GW24AC up to 20250127. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Login. The manipulation of the argument browserLang leads to cross site scripting. The attack can be launched remotely. T...

CVE-2025-0869

CVE-2025-0869 affects Cianet ONU GW24AC firmware versions up to 20250127. The vulnerability lies in the Login component, where manipulation of the browserLang argument enables cross-site scripting. Exploitation is possible remotely, and the exploit has been publicly disclosed. Multiple connected ...

CVE-2025-0869 Cianet ONU GW24AC Login cross site scripting

A vulnerability was found in Cianet ONU GW24AC up to 20250127. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Login. The manipulation of the argument browserLang leads to cross site scripting. The attack can be launched remotely. T...

CVE-2025-0869 Cianet ONU GW24AC Login cross site scripting

A vulnerability was found in Cianet ONU GW24AC up to 20250127. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Login. The manipulation of the argument browserLang leads to cross site scripting. The attack can be launched remotely. T...

PT-2025-4078 · Cianet · Cianet Onu Gw24Ac

Name of the Vulnerable Software and Affected Versions: Cianet ONU GW24AC versions up to 20250127 Description: A problem has been detected in the Login component of the affected software, where the manipulation of the browserLang argument leads to cross-site scripting. This issue can be exploited...

CVE-2024-30973

An issue in V-SOL G/EPON ONU HG323AC-B with firmware version V2.0.08-210715 allows an attacker to execute arbtirary code and obtain sensitive information via crafted POST request to /boaform/getASPdata/formFirewall, /boaform/getASPdata/formAcc...

CVE-2024-30973

An issue in V-SOL G/EPON ONU HG323AC-B with firmware version V2.0.08-210715 allows an attacker to execute arbtirary code and obtain sensitive information via crafted POST request to /boaform/getASPdata/formFirewall, /boaform/getASPdata/formAcc...

CVE-2021-37384

RCE Remote Code Execution vulnerability was found in some Furukawa ONU models, this vulnerability allows remote unauthenticated users to send arbitrary commands to the device via web interface...

CVE-2021-37384

RCE Remote Code Execution vulnerability was found in some Furukawa ONU models, this vulnerability allows remote unauthenticated users to send arbitrary commands to the device via web interface...

CVE-2021-37384

RCE Remote Code Execution vulnerability was found in some Furukawa ONU models, this vulnerability allows remote unauthenticated users to send arbitrary commands to the device via web interface...

CVE-2020-23592

A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack to Reset ONU to Factory Default through ' /mgmdevreset.asp.' Resetting to default leads to Escalation o...

Cross site request forgery (csrf)

A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack to Reset ONU to Factory Default through ' /mgmdevreset.asp.' Resetting to default leads to Escalation o...

CVE-2020-23592

A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack to Reset ONU to Factory Default through ' /mgmdevreset.asp.' Resetting to default leads to Escalation o...