Live › vulnerability › CVE-2018-10562
Go to dashboardDasan GPON routers contain an authentication bypass that, combined with CVE-2018-10561, lets an attacker run commands on the router. The attacker gets full control of the device and the network traffic that passes through it.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
The impacted product is end-of-life and should be disconnected if still in use.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Dasan Gigabit Passive Optical Network (GPON) Routers | vendor | – | – |
Identify any Dasan GPON router in your network, including ISP-supplied or branch-office units; the sources do not give a command or setting to check the firmware version.
Disconnect the impacted Dasan GPON router if it is still in use, since the product is end-of-life and no patch is listed in the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An issue was discovered on Dasan GPON home routers. Command Injection can occur via the dest_host parameter in a diag_action=ping request to a GponForm/diag_Form URI. Because the router saves ping results in /tmp and transmits them to the user when the user revisits /diag.html, it's quite simple to execute commands and retrieve their output.
This page as .md · .json · in your agent: get_signal("CVE-2018-10562")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.