CVE-2025-63409

Privilege escalation and improper access control in GCOM EPON 1GE C00R371V00B01 allows remote authenticated users to modify administrator only settings and…

High · published February 24, 2026

CVSS v3.1
8.8
EPSS
0%
Percentile
24.2
In the wild
Unconfirmed
What it is

Privilege escalation and improper access control in GCOM EPON 1GE C00R371V00B01 allows remote authenticated users to modify administrator only settings and extract administrator credentials.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00324 · 24.2th percentile
Published
2026-02-24T00:00Z
EPSS history
Timeline
  • 24 FEB 00:00Z
    Privilege escalation and improper access control in GCOM EPON 1GE C00R371V00B01 allows remote authenticated users to modify administrator only settings and…
    cvelistv5