Dasan · Gigabit Passive Optical Network (GPON) Routers

CVE-2018-10562

Dasan GPON Routers Command Injection Vulnerability

Exploited in attacks Used by ransomware Critical 9.8 Attack chance: 99.9%

What it is

An issue was discovered on Dasan GPON home routers. Command Injection can occur via the dest_host parameter in a diag_action=ping request to a GponForm/diag_Form URI. Because the router saves ping results in /tmp and transmits them to the user when the user revisits /diag.html, it's quite simple to execute commands and retrieve their output.

CISA: Dasan GPON Routers contain an authentication bypass vulnerability. When combined with CVE-2018-10561, exploitation can allow an attacker to perform remote code execution.

What to do

The impacted product is end-of-life and should be disconnected if still in use.

Deadline for US federal agencies: April 21, 2022

Added to the CISA list: March 31, 2022
Published: May 4, 2018
Severity: Critical 9.8 CVSS 3.1
Chance of attacks in the next 30 days (EPSS): 99.9% in the top 0.1% of all known vulnerabilities
Weakness: CWE-78
More details: NVD · CVE.org · CISA

All references (3)

More exploited flaws from Dasan

Added	Vulnerability	Product	Severity	Attack chance
Mar 31, 2022	GPON Routers Authentication BypassCVE-2018-10561	Gigabit Passive Optical Network (GPON) Routers	Critical 9.8	93%

All of them →

Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.