What is the CVSS score of CVE-2025-63409?

CVE-2025-63409 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Gcom Epon 1ge Firmware are affected by CVE-2025-63409?

Gcom Epon 1Ge devices running firmware versions up to c00r371v00b01 contain an improper access control vulnerability that could allow unauthorized users to gain elevated privileges or access…

How to fix or mitigate CVE-2025-63409?

Within 24 hours: Inventory all Gcom Epon 1Ge devices and identify firmware versions in use; isolate or restrict management access to affected devices. Within 7 days: Implement network segmentation to limit device accessibility and disable remote management protocols if operationally feasible; monitor device logs for unauthorized access attempts. Within 30 days: Contact Gcom for patch availability and deployment timeline; evaluate replacement devices if patches remain unavailable; conduct security assessment of any devices that showed suspicious activity.

Gcom Epon 1ge Firmware CVE-2025-63409

HIGH

Improper Access Control (CWE-284)

2026-02-24 cve@mitre.org

Privilege Escalation Gcom Epon 1ge Firmware Authentication Bypass

8.8

CVSS 3.1 · Vendor: mitre

Severity by source

Vendor (mitre) PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from Vendor (mitre) · only source for this CVE.

CVSS VectorVendor: mitre

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Feb 24, 2026 - 16:24 nvd

HIGH 8.8

DescriptionCVE.org

Privilege escalation and improper access control in GCOM EPON 1GE C00R371V00B01 allows remote authenticated users to modify administrator only settings and extract administrator credentials.

AnalysisAI

Gcom Epon 1Ge Firmware versions up to c00r371v00b01 is affected by improper access control (CVSS 8.8).

Technical ContextAI

This vulnerability (CWE-284: Improper Access Control) affects Gcom Epon 1Ge Firmware. Privilege escalation and improper access control in GCOM EPON 1GE C00R371V00B01 allows remote authenticated users to modify administrator only settings and extract administrator credentials.