PT-2025-34659 · Dasan · Dasan Gpon Onu H660Wm+1

Stevenyu113228 · Published 2025-08-25 · Updated 2025-08-25 · CVE-2025-44178

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: DASAN GPON ONU H660WM H660WMR210825 (affected versions not specified)

Description: DASAN GPON ONU H660WM H660WMR210825 is susceptible to improper access control under its default settings. Attackers can exploit this vulnerability to gain unauthorized access to sensitive information and modify its configuration via the UPnP protocol on the WAN side without authentication.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2025-44178

Affected Products

Dasan Gpon Onu H660Wm

Dasan Gpon Onu H660Wmr210825

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-44178 · Security Note
• https://gist.github.com/stevenyu113228/a1fab78fa34a86f7416aa2aa33284fd1 · Note
• https://twitter.com/CVEnew/status/1959992650909548942 · Twitter Post