PT-2018-2613 · Dasan · Dasan Gpon Routers

Published 2018-05-03 · Updated 2025-11-05 · CVE-2018-10562

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Dasan GPON Routers (affected versions not specified)

Description An issue was discovered on Dasan GPON home routers where Command Injection can occur via the dest host parameter in a "diag action=ping" request to a "GponForm/diag Form" URI. The router saves ping results in /tmp and transmits them to the user when the user revisits "/diag.html", making it simple to execute commands and retrieve their output.

Recommendations Dasan GPON Routers: Update the firmware to prevent command injection via the dest host parameter in diag action=ping requests. As a temporary workaround, consider restricting access to the "GponForm/diag Form" URI to minimize the risk of exploitation.

Exploit

Fix

Command Injection

OS Command Injection

Weakness Enumeration

CWE-77

CWE-78

Related Identifiers

BDU:2019-01222

CVE-2018-10562

Affected Products

Dasan Gpon Routers

References · 21

• 🔥 https://github.com/649/Pingpon-Exploit · Exploit
• 🔥 https://github.com/ATpiu/CVE-2018-10562 · Exploit
• 🔥 https://github.com/c0ld1/GPON_RCE · Exploit
• 🔥 https://github.com/Choudai/GPON-LOADER · Exploit
• 🔥 https://vpnmentor.com/blog/critical-vulnerability-gpon-router · Exploit
• 🔥 https://exploit-db.com/exploits/44576 · Exploit
• 🔥❌ https://github.com/f3d0x0/GPON · Exploit, Deleted
• https://bdu.fstec.ru/vul/2019-01222 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-10562 · Security Note
• https://cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv · Note
• https://t.me/aptreports/14400 · Telegram Post
• https://twitter.com/fletch_ai/status/1803714824389734817 · Twitter Post
• https://t.me/cvenotify/108378 · Telegram Post
• http://securityfocus.com/bid/107053 · Note
• https://t.me/true_secator/6680 · Telegram Post