CVE-2018-10561
KEVDasan GPON Routers Authentication Bypass Vulnerability
Description
Dasan GPON Routers contain an authentication bypass vulnerability. When combined with CVE-2018-10562, exploitation can allow an attacker to perform remote code execution.
An issue was discovered on Dasan GPON home routers. It is possible to bypass authentication simply by appending "?images" to any URL of the device that requires authentication, as demonstrated by the /menu.html?images/ or /GponForm/diag_FORM?images/ URI. One can then manage the device.
CVSS 3.1 vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HPublishedMay 4, 2018
Last modifiedJun 17, 2026
Added to KEVMar 31, 2022
Remediation dueApr 21, 2022
References
- securityfocus.com/bid/107053Broken LinkThird Party Advisory
- exploit-db.com/exploits/44576/ExploitThird Party Advisory
- vpnmentor.com/blog/critical-vulnerability-gpon-router/ExploitTechnical Description
- cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-10561US Government Resource
0 recent articles mention this CVE
88
Risk assessment · Critical
Actively exploited. Patch immediately.
- Exploitation
- Confirmed in the wild (CISA KEV)
- Federal remediation deadline
- Overdue by 1649 days
- CVSS
- 9.8 CRITICAL
- EPSS (30-day exploit probability)
- 92.8% · top 1% of all CVEs
- Weakness
- CWE-287
- Attack vector
- Network, remotely reachable
- Preconditions
- No privileges and no user interaction
Recommended actions
- 1.The impacted product is end-of-life and should be disconnected if still in use.
- 2.Treat as emergency change: patch or isolate internet-facing instances first.
- 3.Review exposure: confirm which instances are reachable from the internet and restrict access until patched.
- 4.Hunt for compromise: review logs for the disclosure window, not just from the patch date.
Assessment is derived automatically from the live signals above; verify against your own asset inventory.