Dasannetworks vulnerabilities
We track 3 vulnerabilities in Dasannetworks products across 2 products. 3 are rated high or critical, and 2 have been exploited in real attacks. The most recent was published on November 19, 2025.
Latest Dasannetworks vulnerabilities
- 9.8 Critical severity
Ds2924 Firmware: Missing Authentication for Critical Functionality
An authentication bypass issue was discovered in Dasan Switch DS2924 web based interface, firmware versions 1.01.18 and 1.02.00, allowing attackers to gain escalated privileges via storing crafted cookies in the web browser.
- 9.8 Critical severity
Dasan GPON Routers Command Injection Exploited
An issue was discovered on Dasan GPON home routers. Command Injection can occur via the dest_host parameter in a diag_action=ping request to a GponForm/diag_Form URI. Because the router saves ping results in /tmp and transmits them to the user when the user re
- 9.8 Critical severity
Dasan GPON Routers Authentication Bypass Exploited
An issue was discovered on Dasan GPON home routers. It is possible to bypass authentication simply by appending "?images" to any URL of the device that requires authentication, as demonstrated by the /menu.html?images/ or /GponForm/diag_FORM?images/ URI. One c