vulnwire
9.8crit

CVE-2018-10561KEVin critical feed1 exploit

An issue was discovered on Dasan GPON home routers.

Published 8 y ago · modified 4 mo ago · JSON

CVSS
9.8
v3.1 · CNA
CISA KEV
Yes
added 2022-03-31
EPSS
92.8%
percentile 100%
Public exploits
1
Exploit-DB

An issue was discovered on Dasan GPON home routers. It is possible to bypass authentication simply by appending "?images" to any URL of the device that requires authentication, as demonstrated by the /menu.html?images/ or /GponForm/diag_FORM?images/ URI. One can then manage the device.

Known exploited (CISA KEV)

Added
4 y ago
Due date
2022-04-21 (4 y ago)
Ransomware use
Unknown
Required action
The impacted product is end-of-life and should be disconnected if still in use.
Vendor / product
Dasan / Gigabit Passive Optical Network (GPON) Routers
CISA name
Dasan GPON Routers Authentication Bypass Vulnerability

CISA SSVC assessment

Exploitation
Active — exploited in the wild
Automatable
yes
Technical impact
total
Assessed
21 mo ago

Exploit prediction (EPSS)

92.82% probability of exploitation in the next 30 days, higher than 100% of all scored CVEs.

Exploits and detections

  • EDB-44576 GPON Routers - Authentication Bypass / Command Injection · remote · 2018-05-03

CVSS scores

Assigned byVersionScoreVector
CISA ADP3.19.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD3.19.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CNA3.19.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

Classification

Weakness

References

  • securityfocus.com /bid/107053 · vdb-entry, x_refsource_BID, x_transferred
  • exploit-db.com /exploits/44576/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
  • vpnmentor.com /blog/critical-vulnerability-gpon-router/ · x_refsource_MISC, x_transferred
  • cisa.gov /known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-10561 · government-resource

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.