DA
Vendor
Dasannetworks
10
CVEs
2
On KEV
0
New 30D
Products
GR9.8
Gpon Router Firmware
Dasannetworks
2 CVEs2 on KEV0 new
HF9.1
H660rm Firmware
Dasannetworks
3 CVEs0 on KEV0 new
DF9.8
Ds2924 Firmware
Dasannetworks
1 CVEs0 on KEV0 new
HF9.8
H640x Firmware
Dasannetworks
1 CVEs0 on KEV0 new
HF7.2
H660gw Firmware
Dasannetworks
1 CVEs0 on KEV0 new
HF9.8
H665 Firmware
Dasannetworks
1 CVEs0 on KEV0 new
WW9.8
W-web
Dasannetworks
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-63206 | DF Ds2924 Firmware Dasannetworks | 9.8 | Nov 19 | An authentication bypass issue was discovered in Dasan Switch DS2924 web based interface, firmware versions 1.01.18 and 1.02.00, allowing attackers to gain escalated privileges… |
| CVE-2023-42495 | WW W-web Dasannetworks | 9.8 | Dec 13 | Dasan Networks - W-Web versions 1.22-1.27 - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') |
| CVE-2019-9976 | HF H660rm Firmware Dasannetworks | 8.8 | Apr 11 | The Boa server configuration on DASAN H660RM devices with firmware 1.03-0022 logs POST data to the /tmp/boa-temp file, which allows logged-in users to read the credentials of… |
| CVE-2019-9975 | HF H660rm Firmware Dasannetworks | 7.5 | Apr 11 | DASAN H660RM devices with firmware 1.03-0022 use a hard-coded key for logs encryption |
| CVE-2019-9974 | HF H660rm Firmware Dasannetworks | 9.1 | Apr 11 | diag_tool.cgi on DASAN H660RM GPON routers with firmware 1.03-0022 lacks any authorization check, which allows remote attackers to run a ping command via a GET request to… |
| CVE-2019-8950 | HF H665 Firmware Dasannetworks | 9.8 | Feb 20 | The backdoor account dnsekakf2$$ in /bin/login on DASAN H665 devices with firmware 1.46p1-0028 allows an attacker to login to the admin account via TELNET |
| CVE-2018-17867 | HF H660gw Firmware Dasannetworks | 7.2 | Oct 1 | The Port Forwarding functionality on DASAN H660GW devices allows remote attackers to execute arbitrary code via shell metacharacters in the cgi-bin/adv_nat_virsvr.asp Addr… |
| CVE-2018-10562 RansomwareIn wildKEV | GR Gpon Router Firmware Dasannetworks | 9.8 | May 4 | Dasan GPON Routers Command Injection Vulnerability |
| CVE-2018-10561 In wildKEV | GR Gpon Router Firmware Dasannetworks | 9.8 | May 4 | Dasan GPON Routers Authentication Bypass Vulnerability |
| CVE-2017-18046 | HF H640x Firmware Dasannetworks | 9.8 | Jan 21 | Buffer overflow on Dasan GPON ONT WiFi Router H640X 12.02-01121 2.77p1-1124 and 3.03p2-1146 devices allows remote attackers to execute arbitrary code via a long POST request to… |