Lucene search
This script is Copyright (C) 2019-2024 and is owned by Tenable, Inc. or an Affiliate thereof.GPON_CVE-2019-3920.NBINHistoryMar 28, 2019 - 12:00 a.m.
GPON ONT Home Gateway Authenticated Remote Command Execution (CVE-2019-3920)
2019-03-2800:00:00
This script is Copyright (C) 2019-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
95
An issue was discovered in GPON ONT Home Gateway web administration interface. A remote command execution vulnerability exists in /GponForm/device_Form?script/ component due to insufficient input validation. An authenticated, remote attacker can exploit this to escalate their permissions level and execute arbitrary commands with root privileges.
Note that Nessus has authenticated to GPON Home Gateway web interface by using supplied credentials or utilized an authentication bypass (CVE-2018-10561) issue in order to exploit this vulnerability.
Binary data gpon_cve-2019-3920.nbin| Vendor | Product | Version | CPE |
|---|---|---|---|
| dasannetworks | gpon_router | cpe:/a:dasannetworks:gpon_router |
Related
prion
prion
Authentication flaw
2018-05-04 03:29:00
Command injection
2019-03-05 21:29:00
nessus
nessus
checkpoint_advisories
checkpoint_advisories
Dasan GPON Router Authentication Bypass (CVE-2018-10561)
2018-05-13 00:00:00
cve
cve
CVE-2018-10561
2018-05-04 03:29:00
CVE-2019-3920
2019-03-05 21:29:00
exploitpack
exploitpack
Alcatel-Lucent (Nokia) GPON I-240W-Q - Buffer Overflow
2019-02-28 00:00:00
attackerkb
attackerkb
CVE-2018-10561
2018-05-04 00:00:00
exploitdb
exploitdb
Alcatel-Lucent (Nokia) GPON I-240W-Q - Buffer Overflow
2019-02-28 00:00:00
threatpost
threatpost
D-Link, Dasan Routers Under Attack In Yet Another Assault
2018-07-20 20:24:12
Wicked Botnet Uses Passel of Exploits to Target IoT
2018-05-21 13:01:56
Millions of Home Fiber Routers Vulnerable to Complete Takeover
2018-05-01 21:21:14
zdt
zdt
GPON Routers - Authentication Bypass / Command Injection Exploit
2018-05-03 00:00:00
kitploit
kitploit
GPON - Python Exploit For Remote Code Executuion On GPON Home Routers (CVE-2018-10562)
2018-05-09 21:34:00
Sn1per v6.0 - Automated Pentest Framework For Offensive Security Experts
2018-11-24 12:43:00
Sn1per v5.0 - Automated Pentest Recon Scanner
2018-07-05 13:45:00
packetstorm
packetstorm
GPON Router Authentication Bypass / Comand Injection
2018-05-04 00:00:00
myhack58
myhack58
seebug
seebug
Critical RCE Vulnerability Found in Over a Million GPON Home Routers
2018-05-02 00:00:00
cisa_kev
cisa_kev
Dasan GPON Routers Authentication Bypass Vulnerability
2022-03-31 00:00:00
Dasan GPON Routers Command Injection Vulnerability
2022-03-31 00:00:00
openvas
openvas
GPON Routers Multiple Vulnerabilities
2018-05-03 00:00:00
thn
thn
Hackers are exploiting a new zero-day flaw in GPON routers
2018-05-23 09:15:00
A Simple Tool Released to Protect Dasan GPON Routers from Remote Hacking
2018-05-08 13:05:00
5 Powerful Botnets Found Exploiting Unpatched GPON Router Flaws
2018-05-10 14:38:00
qualysblog
qualysblog
Timely Password-Change Call from Twitter, as Bugs Hit WebEx and GPON routers
2018-05-08 01:08:05
Top 19+ Vulnerability CVEs in Santa’s Dashboard Tracking
2019-12-27 18:01:22
securelist
securelist
New trends in the world of IoT threats
2018-09-18 10:00:36
mssecure
mssecure
Microsoft research uncovers new Zerobot capabilities
2022-12-21 20:00:00
mmpc
mmpc
Microsoft research uncovers new Zerobot capabilities
2022-12-21 20:00:00
Related for GPON_CVE-2019-3920.NBIN