Design/Logic Flaw

The backdoor account dnsekakf2$$ in /bin/login on DASAN H665 devices with firmware 1.46p1-0028 allows an attacker to login to the admin account via TELNET...

CVE-2019-8950

The backdoor account dnsekakf2$$ in /bin/login on DASAN H665 devices with firmware 1.46p1-0028 allows an attacker to login to the admin account via TELNET...

CVE-2019-8950

CVE-2019-8950 affects DASAN H665 devices with firmware 1.46p1-0028, where a backdoor account dnsekakf2$$ exists in /bin/login, enabling login to the admin account via TELNET. The issue is confirmed across multiple sources in connected documents (e.g., PT-2019-19276), which describe a backdoor in ...

CVE-2019-8950

The backdoor account dnsekakf2$$ in /bin/login on DASAN H665 devices with firmware 1.46p1-0028 allows an attacker to login to the admin account via TELNET...

PT-2019-19276 · Dasan · Dasan H665

Name of the Vulnerable Software and Affected Versions: DASAN H665 version 1.46p1-0028 Description: A backdoor account exists in the /bin/login of DASAN H665 devices, allowing an attacker to login to the admin account via TELNET using the account dnsekakf2$$. This issue has seen increased interest...

DASAN H665 Backdoor Account Vulnerability

DASAN H665 has a vendor backdoor built into BusyBox /bin/login that provides remote root access with no password. DASAN H665 has vendor backdoor built into BusyBox /bin/login. Account named "dnsekakf2$$" gives access to admin uid 0 account over telnet without any password, at least for...

DASAN H665 Backdoor Account

Hi! DASAN H665 has vendor backdoor built into BusyBox /bin/login. Account named "dnsekakf2$$" gives access to admin uid 0 account over telnet without any password, at least for administration interface documented in H665 Quick Guide subnet 192.168.55.0/24 on LAN interface. $ telnet 192.168.55.1...

Design/Logic Flaw

The Port Forwarding functionality on DASAN H660GW devices allows remote attackers to execute arbitrary code via shell metacharacters in the cgi-bin/advnatvirsvr.asp Addr parameter aka the Local IP Address field...

Cross site scripting

DASAN H660GW devices have Stored XSS in the Port Forwarding functionality...

CVE-2018-17868

DASAN H660GW devices have Stored XSS in the Port Forwarding functionality...

CVE-2018-17869

DASAN H660GW devices do not implement any CSRF protection mechanism...

Cross site request forgery (csrf)

DASAN H660GW devices do not implement any CSRF protection mechanism...

CVE-2018-17867

The Port Forwarding functionality on DASAN H660GW devices allows remote attackers to execute arbitrary code via shell metacharacters in the cgi-bin/advnatvirsvr.asp Addr parameter aka the Local IP Address field...

CVE-2018-17868

DASAN H660GW devices have Stored XSS in the Port Forwarding functionality...

CVE-2018-17869

DASAN H660GW devices do not implement any CSRF protection mechanism...

CVE-2018-17867

The Port Forwarding functionality on DASAN H660GW devices allows remote attackers to execute arbitrary code via shell metacharacters in the cgi-bin/advnatvirsvr.asp Addr parameter aka the Local IP Address field...

CVE-2018-17867

The CVE-2018-17867 entry concerns DASAN H660GW devices, where the Port Forwarding functionality can be abused by remote attackers to execute arbitrary code via shell metacharacters in the cgi-bin/adv_nat_virsvr.asp Addr (Local IP Address) parameter. NVD data indicates a high-severity impact with ...

CVE-2018-17869

CVE-2018-17869 affects DASAN H660GW devices, where the underlying cause is lack of CSRF protection. The entry notes no CSRF protection mechanism is implemented. NVD lists CVSS v2 base 6.8 (NETWORK, MEDIUM) and CVSS v3 base 8.8 (NETWORK, HIGH) with user interaction required. No exploitation detail...

CVE-2018-17868

CVE-2018-17868 affects DASAN H660GW devices with a Stored XSS vulnerability in the Port Forwarding functionality. According to the connected records, the issue is a stored cross-site scripting flaw in the router’s web interface, enabling injection of malicious scripts via Port Forwarding settings...

D-Link, Dasan Routers Under Attack In Yet Another Assault

Unpatched D-Link and Dasan GPON router vulnerabilities are being targeted by hackers attempting to build a botnet army, according to research published Friday by eSentire Threat Intelligence. Researchers observed on Thursday a massive uptick in exploit attempts from over 3,000 different source IP...