Gpon Router Firmware vulnerabilities

2 known vulnerabilities in Gpon Router Firmware from Dasannetworks. 2 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Dasan GPON Routers Command Injection Exploited

  CVE-2018-10562May 4, 2018DasannetworksEPSS 99.9%

  An issue was discovered on Dasan GPON home routers. Command Injection can occur via the dest_host parameter in a diag_action=ping request to a GponForm/diag_Form URI. Because the router saves ping results in /tmp and transmits them to the user when the user re

• 9.8 Critical severity

  Dasan GPON Routers Authentication Bypass Exploited

  CVE-2018-10561May 4, 2018DasannetworksEPSS 92.8%

  An issue was discovered on Dasan GPON home routers. It is possible to bypass authentication simply by appending "?images" to any URL of the device that requires authentication, as demonstrated by the /menu.html?images/ or /GponForm/diag_FORM?images/ URI. One c