CVE-2018-10561
Published 2018-05-04 · Updated 2026-06-17 · Source cve@mitre.org
Summary
CVE-2018-10561 is a critical-severity (CVSS 9.8) vulnerability in Dasan Gigabit Passive Optical Network (GPON) Routers. CISA added it to the Known Exploited Vulnerabilities catalog on March 31, 2022, which means exploitation in the wild has been confirmed; US federal agencies had to remediate it by April 21, 2022. CISA does not currently list it as used in ransomware campaigns. Dasan has 2 vulnerabilities in the KEV catalog, 1 of them linked to ransomware.
All 2 known-exploited Dasan vulnerabilities →Description
An issue was discovered on Dasan GPON home routers. It is possible to bypass authentication simply by appending "?images" to any URL of the device that requires authentication, as demonstrated by the /menu.html?images/ or /GponForm/diag_FORM?images/ URI. One can then manage the device.
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA Known-Exploited Vulnerability
Product: Dasan — Gigabit Passive Optical Network (GPON) Routers
Name: Dasan GPON Routers Authentication Bypass Vulnerability
Date added: 2022-03-31 · Due: 2022-04-21
Required action: The impacted product is end-of-life and should be disconnected if still in use.
References
- http://www.securityfocus.com/bid/107053
- https://www.exploit-db.com/exploits/44576/
- https://www.vpnmentor.com/blog/critical-vulnerability-gpon-router/
- http://www.securityfocus.com/bid/107053
- https://www.exploit-db.com/exploits/44576/
- https://www.vpnmentor.com/blog/critical-vulnerability-gpon-router/
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-10561