CVE-2019-25239

CVE-2019-25239 is an unauthenticated information disclosure vulnerability in V-SOL GPON/EPON OLT Platform 2.03. It allows attackers to download sensitive configuration files, such as usrcfg.conf, through direct object reference by sending HTTP GET requests. This vulnerability has a high severity CVSS score of 7.5, indicating it can be exploited remotely with low complexity and without authentication, potentially leading to authentication bypass and system access. Despite its high severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.