Lucene search
This script is Copyright (C) 2018-2024 and is owned by Tenable, Inc. or an Affiliate thereof.GPON_CVE-2018-10561.NBINHistoryDec 19, 2018 - 12:00 a.m.
GPON ONT Home Gateway Router is vulnerable to authentication bypass (CVE-2018-10561)
2018-12-1900:00:00
This script is Copyright (C) 2018-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
761
An issue was discovered in GPON ONT Home Gateway Router web administration interface. It is possible to bypass authentication of web interface by using the following approach:
- http(s)://<Router IP>/<some file>?images/
- http(s)://<Router IP>/<some file>?style/
- http(s)://<Router IP>/<some file>?script/
- http(s)://<Router IP>/images/…/<some file>
- http(s)://<Router IP>/style/…/<some file>
- http(s)://<Router IP>/script/…/<some file> For example, ‘/menu.html?images/’ or ‘/GponForm/diag_FORM?images/’ URI.
This allows an attacker to fully control the target device.
Binary data gpon_cve-2018-10561.nbin| Vendor | Product | Version | CPE |
|---|---|---|---|
| dasannetworks | gpon_router | cpe:/a:dasannetworks:gpon_router |
Related
prion
prion
Authentication flaw
2018-05-04 03:29:00
checkpoint_advisories
checkpoint_advisories
Dasan GPON Router Authentication Bypass (CVE-2018-10561)
2018-05-13 00:00:00
cve
cve
CVE-2018-10561
2018-05-04 03:29:00
exploitpack
exploitpack
Alcatel-Lucent (Nokia) GPON I-240W-Q - Buffer Overflow
2019-02-28 00:00:00
attackerkb
attackerkb
CVE-2018-10561
2018-05-04 00:00:00
exploitdb
exploitdb
Alcatel-Lucent (Nokia) GPON I-240W-Q - Buffer Overflow
2019-02-28 00:00:00
packetstorm
packetstorm
GPON Router Authentication Bypass / Comand Injection
2018-05-04 00:00:00
threatpost
threatpost
D-Link, Dasan Routers Under Attack In Yet Another Assault
2018-07-20 20:24:12
Wicked Botnet Uses Passel of Exploits to Target IoT
2018-05-21 13:01:56
Millions of Home Fiber Routers Vulnerable to Complete Takeover
2018-05-01 21:21:14
zdt
zdt
GPON Routers - Authentication Bypass / Command Injection Exploit
2018-05-03 00:00:00
kitploit
kitploit
GPON - Python Exploit For Remote Code Executuion On GPON Home Routers (CVE-2018-10562)
2018-05-09 21:34:00
Sn1per v6.0 - Automated Pentest Framework For Offensive Security Experts
2018-11-24 12:43:00
Sn1per v5.0 - Automated Pentest Recon Scanner
2018-07-05 13:45:00
nessus
nessus
GPON ONT Home Gateway Authenticated Remote Command Execution (CVE-2019-3920)
2019-03-28 00:00:00
GPON ONT Home Gateway Authenticated Remote Command Execution (CVE-2019-3919)
2019-03-25 00:00:00
myhack58
myhack58
seebug
seebug
Critical RCE Vulnerability Found in Over a Million GPON Home Routers
2018-05-02 00:00:00
cisa_kev
cisa_kev
Dasan GPON Routers Authentication Bypass Vulnerability
2022-03-31 00:00:00
Dasan GPON Routers Command Injection Vulnerability
2022-03-31 00:00:00
openvas
openvas
GPON Routers Multiple Vulnerabilities
2018-05-03 00:00:00
thn
thn
Hackers are exploiting a new zero-day flaw in GPON routers
2018-05-23 09:15:00
5 Powerful Botnets Found Exploiting Unpatched GPON Router Flaws
2018-05-10 14:38:00
A Simple Tool Released to Protect Dasan GPON Routers from Remote Hacking
2018-05-08 13:05:00
qualysblog
qualysblog
Timely Password-Change Call from Twitter, as Bugs Hit WebEx and GPON routers
2018-05-08 01:08:05
Top 19+ Vulnerability CVEs in Santa’s Dashboard Tracking
2019-12-27 18:01:22
securelist
securelist
New trends in the world of IoT threats
2018-09-18 10:00:36
mssecure
mssecure
Microsoft research uncovers new Zerobot capabilities
2022-12-21 20:00:00
mmpc
mmpc
Microsoft research uncovers new Zerobot capabilities
2022-12-21 20:00:00
Related for GPON_CVE-2018-10561.NBIN