Vulnerabilidades do Dasannetworks Gpon Router Firmware
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Dasannetworks Gpon Router Firmware: 2 registro(s), com versões afetadas e correções.cpe:2.3:o:dasannetworks:gpon_router_firmware
CVE-2018-10561
Crítica · 9.8
KEV Urgente · 71 Exploit público CWE-287 04/05/2018
Dasan GPON Routers Authentication Bypass Vulnerability
An issue was discovered on Dasan GPON home routers. It is possible to bypass authentication simply by appending "?images" to any URL of the device that requires authentication, as demonstrated by the /menu.html?images/ or /GponForm/diag_FORM?images/ URI. One can then manage the device.
CVE-2018-10562
Crítica · 9.8
KEV Urgente · 91 Exploit público Ransomware CWE-78 04/05/2018
Dasan GPON Routers Command Injection Vulnerability
An issue was discovered on Dasan GPON home routers. Command Injection can occur via the dest_host parameter in a diag_action=ping request to a GponForm/diag_Form URI. Because the router saves ping results in /tmp and transmits them to the user when the user revisits /diag.html, it's quite simple to execute commands and retrieve their output.