This vulnerability involves privilege escalation and improper access control in GCOM EPON 1GE C00R371V00B01. Remote authenticated users can exploit this issue to gain unauthorized administrative capabilities, including modifying administrator-only settings and extracting administrator credentials. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) reflects network attack vector, low attack complexity, required privileges, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. No patch or remediation information is provided in the available data.

Successful exploitation allows an attacker with valid authentication to escalate privileges to administrator level, potentially leading to full control over the device's configuration and exposure of sensitive administrator credentials. This compromises device security and could facilitate further attacks or persistent unauthorized access.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to authenticated users and monitor for suspicious activity related to administrative settings. Avoid exposing management interfaces to untrusted networks.