Actively exploited in the wild
Dasan GPON Routers Authentication Bypass Vulnerability
Dasan - Gigabit Passive Optical Network (GPON) Routers · Listed in the CISA KEV since 2022-03-31. This indicates confirmed attacks in production environments.
Required action: The impacted product is end-of-life and should be disconnected if still in use.
CVE-2018-10561
CriticalCVSS 9.8KEVSummary
An issue was discovered on Dasan GPON home routers. It is possible to bypass authentication simply by appending "?images" to any URL of the device that requires authentication, as demonstrated by the /menu.html?images/ or /GponForm/diag_FORM?images/ URI. One can then manage the device.
Risk Assessment
This vulnerability allows unauthorized access to the router's management interface, potentially leading to configuration changes and device takeover.
Recommendation
Update Dasan GPON router firmware to the latest version. If updating is not possible, restrict access to the management interface from external networks.
Other vulnerabilities in Dasan GPON router
Original NVD description (English source)
An issue was discovered on Dasan GPON home routers. It is possible to bypass authentication simply by appending "?images" to any URL of the device that requires authentication, as demonstrated by the /menu.html?images/ or /GponForm/diag_FORM?images/ URI. One can then manage the device.