CVE-2018-10561

Dasan GPON Routers Authentication Bypass Vulnerability

Gpon Router Firmware

An issue was discovered on Dasan GPON home routers. It is possible to bypass authentication simply by appending "?images" to any URL of the device that requires authentication, as demonstrated by the /menu.html?images/ or /GponForm/diag_FORM?images/ URI. One can then manage the device.

4. Mai 2018

Ausgewertete Quellen

• Hinweis
  http://www.securityfocus.com/bid/107053
• Hinweis
  https://www.exploit-db.com/exploits/44576/
• Hinweis
  https://www.vpnmentor.com/blog/critical-vulnerability-gpon-router/
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-10561
• CISA
  Dasan GPON Routers Authentication Bypass Vulnerability
• NVD
  CVE-2018-10561