Alphion ASEE Series Routers Default DNS Suffix Misconfiguration Vulnerability

A vulnerability exists in Alphion Subscriber End Equipment Model ASEE series optical network terminals running Firmware v0.4.H.00.02.15. The issue arises from a misconfiguration that sets a previously unregistered domain name as the default DNS suffix. This flaw enables attackers to register the unclaimed domain, direct its wildcard DNS entry to an attacker-controlled IP address, and potentially intercept sensitive end-user network traffic.

Impact

Exploitation of this vulnerability could lead to interception and unauthorized access to sensitive network traffic from end users.