Privilege escalation and improper access control in GCOM EPON 1GE C00R371V00B01 allows remote authenticated users to modify administrator only settings and extract adm…

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Feb 24, 2026 · NIST NVD

   Detected

   Privilege escalation and improper access control in GCOM EPON 1GE C00R371V00B01 allows remote authenticated users to modify administrator only settings and extract administrator credentials.

2. Jul 5, 2026 · NIST NVD

   Updated

   Privilege escalation and improper access control in GCOM EPON 1GE C00R371V00B01 allows remote authenticated users to modify administrator only settings and extract administrator credentials.

Affected

• cpe gcomtw/gcom epon 1ge firmwarec00r371v00b01

Sources

• CVE.orgVulnerability recordCVE-2025-63409

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2025-63409

  Privilege escalation and improper access control in GCOM EPON 1GE C00R371V00B01 allows remote authenticated users to modify administrator only settings and extract administrator credentials.

  nvd.nist.gov

References

• Third Party Advisory · github.com