CVE-2025-71056
Session Hijacking via IP Spoofing in GCOM EPON ONU
Publication date: 2026-02-23
Last updated on: 2026-02-27
Assigner: MITRE
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| beijing_huahuan_electronics_co_ltd | gcom_epon | coor371v00b01 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-290 | This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability involves improper session management in the GCOM EPON 1GE ONU device, specifically version C00R371V00B01. It allows attackers to perform a session hijacking attack by spoofing the IP address of an authenticated user. Essentially, an attacker can impersonate a legitimate user by taking over their session, potentially gaining unauthorized access.
How can this vulnerability impact me? :
The impact of this vulnerability is that an attacker could hijack a valid user session by spoofing their IP address. This could lead to unauthorized access to network services or sensitive information that the authenticated user is permitted to access. It may also allow the attacker to disrupt normal operations or perform malicious actions under the guise of the legitimate user.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
I don't know
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability involves improper session management allowing session hijacking via IP address spoofing of an authenticated user. Detection would involve monitoring for unusual session activity or IP address changes associated with authenticated sessions on the GCOM EPON 1GE ONU devices.
Specific commands to detect this vulnerability are not provided in the available resources or CVE description.
What immediate steps should I take to mitigate this vulnerability?
The CVE description does not provide explicit mitigation steps. However, general best practices for session hijacking vulnerabilities include ensuring proper session management, implementing IP address validation, and applying any available firmware updates or patches from the vendor.
No specific mitigation instructions or vendor advisories are available in the provided resources.