GCOM EPON 1GE Privilege Escalation Vulnerability Allowing Unauthorized Access to Administrator Settings and Credentials

A privilege escalation vulnerability has been identified in GCOM EPON 1GE, version C00R371V00B01. This issue arises from improper access control, which enables remote authenticated users to alter settings reserved for administrators through the web interface and API. Furthermore, the device's backup feature inadvertently reveals an unencrypted configuration file containing sensitive information, including administrator passwords. By exploiting these weaknesses, a low-privileged user can gain full administrative rights on the device.

Impact

Exploitation of this vulnerability allows low-privileged users to gain unauthorized administrative access by modifying restricted settings and extracting sensitive credentials from an unencrypted backup file.