A critical unauthenticated information disclosure vulnerability in V-SOL GPON/EPON OLT Platform allows attackers to retrieve sensitive configuration files, potentially leading to full system compromise.

This is an information disclosure vulnerability (CWE-552) occurring in the web management interface. An unauthenticated attacker can retrieve the usrcfg.conf file by sending a direct HTTP GET request to specific endpoints, which may contain credentials or system secrets required for further exploitation.

The exposure of the usrcfg.conf file poses a severe risk to network infrastructure. By obtaining this configuration data, an attacker can gain administrative credentials, facilitate unauthorized access to the network management layer, or reconfigure the device to intercept traffic. Given the CVSS score of 7.5, this vulnerability represents a high-risk entry point for attackers targeting ISP or enterprise-grade network equipment.

Immediate Action: Restrict access to the OLT web management interface by placing it on an isolated management network or behind a VPN, as there is currently no official patch available.

Proactive Monitoring: Review web server access logs for anomalous GET requests targeting the /device/usrcfg.conf or /action/usrcfg.conf paths.

Compensating Controls: Deploy a Web Application Firewall (WAF) or an Intrusion Prevention System (IPS) rule to block unauthorized requests to the vulnerable configuration endpoints.

Public Exploit Available: Yes, a proof-of-concept exploit is available via ExploitDB (EDB-ID: 47433).

Due to the lack of a vendor-provided patch, organizations utilizing the affected V-SOL OLT platforms must immediately restrict network access to the management interface. This device should never be exposed to the public internet. Ensure that management access is limited to trusted IP addresses only until the vendor provides a secure firmware update.