CVE-2025-1615
FiberHome AN5506-01A ONU GPON NAT Submenu cross site scripting
- State
- Published
- Severity
- 4.8 Medium
- Published
- Feb 24, 2025
- Updated
- Feb 24, 2025
- Reserved
- Feb 23, 2025
Description
A vulnerability classified as problematic was found in FiberHome AN5506-01A ONU GPON RP2511. Affected by this vulnerability is an unknown functionality of the component NAT Submenu. The manipulation of the argument Description leads to cross site scripting. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 4.8 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N | VulDB |
| 3.1 | 2.4 Low | CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N | VulDB |
| 3.0 | 2.4 Low | CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N | VulDB |
| 2.0 | 3.3 Low | AV:N/AC:L/Au:M/C:N/I:P/A:N | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
AN5506-01A ONU GPONFiberHome |
|
References
- VDB-296605 | FiberHome AN5506-01A ONU GPON NAT Submenu cross site scriptingvdb-entrytechnical-description
- VDB-296605 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
- Submit #501408 | FiberHome AN5506-01A ONU GPON RP2511 Cross Site Scriptingthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.