XSS in Ppc Technologies Xpon Ont (Optical Network Terminal) 2k15x
CVE-2025-10546
This vulnerability exist in PPC 2K15X Router, due to improper input validation for the Common Gateway Interface (CGI) parameters at its web management portal. A remote attacker could exploit this vulnerability by injecting malicious JavaScript into the vulnerable parameter, leading to a reflected Cross-Site Scripting (XSS) attack on the targeted system.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.005 (40.3th percentile) — read the EPSS interpretation.
Affected products
- Ppc Technologies Xpon Ont (Optical Network Terminal) 2k15x — versions v2.3.15PPCL, v1.0.3
Weakness classification (CWE)
References
- vdisclose@cert-in.org.in (third-party-advisory)