CVE-2025-63409: Gcomtw Gcom Epon 1ge Firmware

High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Privilege escalation and improper access control in GCOM EPON 1GE C00R371V00B01 allows remote authenticated users to modify administrator only settings and extract administrator credentials.

Affected products

• Gcomtw Gcom Epon 1ge Firmware: version c00r371v00b01 only

Published 2026-02-24. Last modified 2026-07-05.