CVE-2018-10562
Published 2018-05-04 · Updated 2026-06-17 · Source cve@mitre.org
Summary
CVE-2018-10562 is a critical-severity (CVSS 9.8) vulnerability in Dasan Gigabit Passive Optical Network (GPON) Routers. CISA added it to the Known Exploited Vulnerabilities catalog on March 31, 2022, which means exploitation in the wild has been confirmed; US federal agencies had to remediate it by April 21, 2022. CISA also lists it as known to be used in ransomware campaigns, so it should be prioritised accordingly. Dasan has 2 vulnerabilities in the KEV catalog, 1 of them linked to ransomware.
All 2 known-exploited Dasan vulnerabilities →Description
An issue was discovered on Dasan GPON home routers. Command Injection can occur via the dest_host parameter in a diag_action=ping request to a GponForm/diag_Form URI. Because the router saves ping results in /tmp and transmits them to the user when the user revisits /diag.html, it's quite simple to execute commands and retrieve their output.
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA Known-Exploited Vulnerability
Product: Dasan — Gigabit Passive Optical Network (GPON) Routers
Name: Dasan GPON Routers Command Injection Vulnerability
Date added: 2022-03-31 · Due: 2022-04-21
Required action: The impacted product is end-of-life and should be disconnected if still in use.
References
- http://www.securityfocus.com/bid/107053
- https://www.exploit-db.com/exploits/44576/
- https://www.vpnmentor.com/blog/critical-vulnerability-gpon-router/
- http://www.securityfocus.com/bid/107053
- https://www.exploit-db.com/exploits/44576/
- https://www.vpnmentor.com/blog/critical-vulnerability-gpon-router/
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-10562