Vulnerability Details CVE-2025-63409
Privilege escalation and improper access control in GCOM EPON 1GE C00R371V00B01 allows remote authenticated users to modify administrator only settings and extract administrator credentials.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 36.1%
CVSS Severity
CVSS v3 Score 8.8
Products affected by CVE-2025-63409
-
cpe:2.3:h:gcomtw:gcom_epon_1ge:-
-
cpe:2.3:o:gcomtw:gcom_epon_1ge_firmware:c00r371v00b01