CVE-2018-10561criticalunder attackCWE-287

CVE-2018-10561

Published · Updated

Follow this CVE+ Monitor Gigabit Passive Optical Network Routers

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.

ssvc Actcvss 9.8epss 93%
from disclosure to weaponsame day
Published on NVDMay 4
1st PoCMay 3
CISA KEV+1427d
Action required by CISAfederal deadline: 2022-04-21

The impacted product is end-of-life and should be disconnected if still in use.

In short

A flaw in Dasan GPON routers allows anyone to bypass login protection by adding '?images' to URLs, granting full access to manage the device without credentials.

Technical detail

Authentication bypass vulnerability in Dasan GPON routers exploitable via URL manipulation (appending '?images' parameter). An unauthenticated attacker can access protected endpoints like /menu.html and /GponForm/diag_FORM, gaining administrative control without valid credentials.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

An issue was discovered on Dasan GPON home routers. It is possible to bypass authentication simply by appending "?images" to any URL of the device that requires authentication, as demonstrated by the /menu.html?images/ or /GponForm/diag_FORM?images/ URI. One can then manage the device.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.