CVE-2018-10562

🗓️ 04 May 2018 03:00:00Reported by mitreType

An issue discovered on Dasan GPON home routers allows command injection via the dest_host parameter in a diag_action=ping request to a GponForm/diag_Form URI

Reporter	Title	Published	Views	Family All 40
GithubExploit	Exploit for OS Command Injection in Dasannetworks Gpon_Router_Firmware	6 Jun 201809:43	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Dasannetworks Gpon_Router_Firmware	15 May 201817:31	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Dasannetworks Gpon_Router_Firmware	17 May 201822:03	–	githubexploit
0day.today	GPON Routers - Authentication Bypass / Command Injection Exploit	3 May 201800:00	–	zdt
ATTACKERKB	CVE-2018-10562	4 May 201800:00	–	attackerkb
BDU FSTEC	The vulnerability of the Dasan GPON router’s microprogramming software, related to the lack of measures taken to clean data at the management level, allows attackers to perform arbitrary actions with administrator privileges.	29 Mar 201900:00	–	bdu_fstec
Broadcom	BSA-2018-604	8 May 201800:00	–	broadcom
Circl	CVE-2018-10562	10 May 201810:42	–	circl
CISA KEV Catalog	Dasan GPON Routers Authentication Bypass Vulnerability	31 Mar 202200:00	–	cisa_kev
CISA KEV Catalog	Dasan GPON Routers Command Injection Vulnerability	31 Mar 202200:00	–	cisa_kev

Source	Link
exploit-db	www.exploit-db.com/exploits/44576/
vpnmentor	www.vpnmentor.com/blog/critical-vulnerability-gpon-router/
securityfocus	www.securityfocus.com/bid/107053

19 Feb 2019 10:57Current

10High risk

Vulners AI Score10

EPSS0.9411