Critical severity · published May 4, 2018
CVE-2018-10561
Dasan GPON Routers Authentication Bypass Vulnerability
In wildKEV
9.8
CVSS
92.8%
EPSS
Yes
On KEV
Description
An issue was discovered on Dasan GPON home routers. It is possible to bypass authentication simply by appending "?images" to any URL of the device that requires authentication, as demonstrated by the /menu.html?images/ or /GponForm/diag_FORM?images/ URI. One can then manage the device.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)92.8% · higher than 100% of CVEs
Exploited in the wildYes
CISA KEVListed Mar 31, 2022
Federal remediation dueApr 21, 2022
Ransomware campaign useNot known
Affected products
Which versions
GR
Gpon Router Firmware · Dasannetworks
All versions, or not specified · source: NVD
GP
Gigabit Passive Optical Network (GPON) Routers · Dasan
All versions, or not specified · source: KEV
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-10561
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-10561
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
vdb-entry
http://www.securityfocus.com/bid/107053
exploit
https://www.exploit-db.com/exploits/44576/
x_refsource_MISC
https://www.vpnmentor.com/blog/critical-vulnerability-gpon-router/
More from Gpon Router Firmware
9.8
CVE-2018-10562
Dasan GPON Routers Command Injection Vulnerability