Firetruck

CVE-2018-10562

KEV · Ransomware

Dasan GPON Routers Command Injection Vulnerability

View CVE record →
Vendor / Project
Dasan
Product
Gigabit Passive Optical Network (GPON) Routers
Date added
Mar 31, 2022
Due date
Apr 21, 2022
Known ransomware use
Known
CWEs
CWE-78

Description

Dasan GPON Routers contain an authentication bypass vulnerability. When combined with CVE-2018-10561, exploitation can allow an attacker to perform remote code execution.

Required action

The impacted product is end-of-life and should be disconnected if still in use.

Notes