Cross Site Scripting Vulnerability in FiberHome AN5506-01A ONU GPON by FiberHome
CVE-2025-1613

4.8MEDIUM

Key Information:

Vendor
Fiberhome
Status
An5506-01a Onu Gpon
Vendor
CVE Published:
24 February 2025

Summary

The FiberHome AN5506-01A ONU GPON RP2511 contains a cross site scripting vulnerability related to the URL Filtering Submenu. Specifically, the manipulation of the 'url_IP' argument in the /goform/URL_filterCfg file allows attackers to execute scripts in the context of the user's browser. This weakness enables malicious actors to initiate remote attacks that could compromise user data or perform unauthorized actions, presenting a significant risk to users and organizations utilizing this product.

Affected Version(s)

AN5506-01A ONU GPON RP2511

References

https://vuldb.com/?id.296603
vdb-entrytechnical-description
https://vuldb.com/?ctiid.296603
signaturepermissions-required
https://vuldb.com/?submit.501349
third-party-advisory

CVSS V4

Score:
4.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Havook (VulDB User)
.