CVE-2015-2055
Zhone GPON 2520 with firmware R4.0.2.566b allows remote attackers to cause a denial of service...
Zhone GPON 2520 with firmware R4.0.2.566b allows remote attackers to cause a denial of service via a long string in the oldpassword parameter.
Exploit likelihood
What each source reports
NVD Score used
Zhone GPON 2520 with firmware R4.0.2.566b allows remote attackers to cause a denial of service via a long string in the oldpassword parameter.
- Record
CVE-2015-2055- CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:N/I:N/A:C - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
Zhone GPON 2520 with firmware R4.0.2.566b allows remote attackers to cause a denial of service via a long string in the oldpassword parameter.
- Record
CVE-2015-2055- Updated
- 2026-11-02
EUVDEUVD-2015-2168 No score
Zhone GPON 2520 with firmware R4.0.2.566b allows remote attackers to cause a denial of service via a long string in the oldpassword parameter.
- Record
EUVD-2015-2168- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wpfg-h6pp-74wp No score
Zhone GPON 2520 with firmware R4.0.2.566b allows remote attackers to cause a denial of service...
Zhone GPON 2520 with firmware R4.0.2.566b allows remote attackers to cause a denial of service via a long string in the oldpassword parameter.
- Record
GHSA-wpfg-h6pp-74wp- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Zhone GPON 2520 R4.0.2.566b - Crash (PoC) | 2015-01-21 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-2055 is a high vulnerability (CVSS 7.8) in Zhone Technologies Gpon 2520 Firmware, published February 23, 2015. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.03%, the 87th percentile. No source names a fixed version.