An open redirect vulnerability in the V-SOL GPON/EPON OLT Platform allows attackers to perform phishing or redirection attacks against authenticated users.

This is an open redirect vulnerability located in the platform's script mechanism. It allows an attacker to manipulate the 'parent' GET parameter, requiring the victim to be logged into the platform for the attack to succeed.

The exploitation of this vulnerability could lead to successful social engineering and phishing attacks, as users may be directed to malicious infrastructure while appearing to remain on a trusted domain. With a CVSS score of 9.8, the potential for high-impact credential theft or malware delivery is significant, posing a severe risk to organizational network integrity and user security.

Immediate Action: Contact the vendor (V-SOL) to obtain the latest firmware or software update that addresses input validation flaws in the redirection script.

Proactive Monitoring: Audit web server access logs for anomalous GET requests containing suspicious 'parent' parameter strings.

Compensating Controls: Implement a Web Application Firewall (WAF) rule to inspect and sanitize the 'parent' parameter or restrict redirection targets to an approved allow-list.

Public Exploit Available: Not specified

Given the critical nature of this flaw, administrators must prioritize the remediation of the redirection logic. Organizations should ensure that all users are cautioned against clicking suspicious links originating from the OLT management interface until a patch is applied.