Dasan · Gigabit Passive Optical Network (GPON) Routers

CVE-2018-10561

Dasan GPON Routers Authentication Bypass Vulnerability

Exploited in attacks Critical 9.8 Attack chance: 93%

What it is

An issue was discovered on Dasan GPON home routers. It is possible to bypass authentication simply by appending "?images" to any URL of the device that requires authentication, as demonstrated by the /menu.html?images/ or /GponForm/diag_FORM?images/ URI. One can then manage the device.

CISA: Dasan GPON Routers contain an authentication bypass vulnerability. When combined with CVE-2018-10562, exploitation can allow an attacker to perform remote code execution.

What to do

The impacted product is end-of-life and should be disconnected if still in use.

Deadline for US federal agencies: April 21, 2022

Added to the CISA list: March 31, 2022
Published: May 4, 2018
Severity: Critical 9.8 CVSS 3.1
Chance of attacks in the next 30 days (EPSS): 93% in the top 0.2% of all known vulnerabilities
Weakness: CWE-287
More details: NVD · CVE.org · CISA

All references (3)

More exploited flaws from Dasan

Added	Vulnerability	Product	Severity	Attack chance
Mar 31, 2022	GPON Routers Command InjectionCVE-2018-10562used by ransomware	Gigabit Passive Optical Network (GPON) Routers	Critical 9.8	99.9%

All of them →

Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.