371 matches found
GPON Home Router Detection (HTTP)
HTTP based detection of GPON Home Router. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.113169...
GPON Routers Multiple Vulnerabilities
GPON Home Routers are prone to multiple vulnerabilities. Those vulnerabilities where known to be exploited by the Mettle, Muhstik, Mirai, Hajime, and Satori Botnets in 2018. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...
GPON Routers - Authentication Bypass / Command Injection
!/bin/bash echo "+ Sending the Command… " We send the commands with two modes backtick and semicolon ; because different models trigger on different devices curl -k -d "XWebPageName=diag&diagaction=ping&wanconlist=0&desthost=$2;$2&ipv=0" $1/GponForm/diagForm?images/ 2/dev/null 1/dev/null echo "+...
GPon Router Remote Command Execution Vulnerability
Dasan GPON is a home router product from Dasan Korea. A command injection vulnerability exists in the Dasan GPON Home Router that originates when a user revisits the /diag.html page where the router saves the results of the Internet Packet Explorer in /tmp and transmits it to the user. An attacke...
Critical RCE Vulnerability Found in Over a Million GPON Home Routers
Overview: We conducted a comprehensive assessment on a number of GPON home routers. Many routers today use GPON internet, and we found a way to bypass all authentication on the devices CVE-2018-10561. With this authentication bypass, we were also able to unveil another command injection...
Millions of Home Fiber Routers Vulnerable to Complete Takeover
UPDATE Consumers lucky enough to have blazing-fast 1Gbps internet access in their homes are likely to use the internet more than lower-broadband households; however, millions of them are at risk for hackers to gain wide-ranging access to their internet activities including being able to view full...
Dasan GPON ONT WiFi Router Buffer Overflow Vulnerability
Dasan GPON ONT WiFi Router is a wireless router device from DASAN Networks, Korea. A buffer overflow vulnerability exists in the Dasan GPON ONT WiFi Router H640X version 12.02-0112, version 2.77p1-1124, and version 3.03p2-1146. A remote attacker can exploit this vulnerability by sending a long PO...
CVE-2017-18046
Buffer overflow on Dasan GPON ONT WiFi Router H640X 12.02-01121 2.77p1-1124 and 3.03p2-1146 devices allows remote attackers to execute arbitrary code via a long POST request to the loginaction function in /cgi-bin/loginaction.cgi aka cgipage.cgi...
Buffer overflow
Buffer overflow on Dasan GPON ONT WiFi Router H640X 12.02-01121 2.77p1-1124 and 3.03p2-1146 devices allows remote attackers to execute arbitrary code via a long POST request to the loginaction function in /cgi-bin/loginaction.cgi aka cgipage.cgi...
CVE-2017-18046
Buffer overflow on Dasan GPON ONT WiFi Router H640X 12.02-01121 2.77p1-1124 and 3.03p2-1146 devices allows remote attackers to execute arbitrary code via a long POST request to the loginaction function in /cgi-bin/loginaction.cgi aka cgipage.cgi...
CVE-2017-18046
CVE-2017-18046 affects Dasan GPON ONT WiFi Router H640X — versions 12.02-01121 2.77p1-1124 and 3.03p2-1146. A buffer overflow in the login_action.cgi CGI endpoint (/cgi-bin/login_action.cgi) can be triggered by a long POST request, enabling remote arbitrary code execution. The provided connected ...
Dasan Networks GPON ONT WiFi Router H64X Series Authentication Bypass
Summary H64xx is comprised of one G-PON uplink port and four ports of Gigabit Ethernet downlink supporting 10/100/1000Base-T RJ45. It helps service providers to extend their core optical network all the way to their subscribers, eliminating bandwidth bottlenecks in the last mile. H64xx is...
Dasan Networks GPON ONT WiFi Router H64X Series System Config Download
Summary H64xx is comprised of one G-PON uplink port and four ports of Gigabit Ethernet downlink supporting 10/100/1000Base-T RJ45. It helps service providers to extend their core optical network all the way to their subscribers, eliminating bandwidth bottlenecks in the last mile. H64xx is...
Dasan Networks GPON ONT WiFi Router H64X Series Cross-Site Request Forgery
Summary H64xx is comprised of one G-PON uplink port and four ports of Gigabit Ethernet downlink supporting 10/100/1000Base-T RJ45. It helps service providers to extend their core optical network all the way to their subscribers, eliminating bandwidth bottlenecks in the last mile. H64xx is...
Dasan Networks GPON ONT WiFi Router H640X 12.02-01121 2.77p1-1124 3.03p2-1146 - Remote Code Execution
Dasan Networks GPON ONT WiFi Router H640X 12.02-01121 2.77p1-1124 3.03p2-1146 - Remote Code Execution Vulnerability Summary The following advisory describes a buffer overflow that leads to remote code execution found in Dasan Networks GPON ONT WiFi Router H640X versions 12.02-01121 / 2.77p1-1124 ...
Dasan Networks GPON ONT WiFi Router H640X 12.02-01121 / 2.77p1-1124 / 3.03p2-1146 - Remote Code Execution
Vulnerability Summary The following advisory describes a buffer overflow that leads to remote code execution found in Dasan Networks GPON ONT WiFi Router H640X versions 12.02-01121 / 2.77p1-1124 / 3.03p2-1146 Dasan Networks GPON ONT WiFi Router “is indoor type ONT dedicated for FTTH Fibre to the...
CVE-2014-9118
The web administrative portal in Zhone zNID GPON 2426A before S3.0.501 allows remote attackers to execute arbitrary commands via shell metacharacters in the ipAddr parameter to zhnping.cmd...
CVE-2014-8357
backupsettings.html in the web administrative portal in Zhone zNID GPON 2426A before S3.0.501 places a session key in a URL, which allows remote attackers to obtain arbitrary user passwords via the sessionKey parameter in a getConfig action to backupsettings.conf...