CVE

CVE-2018-10562

P1⬤ KNOWN RANSOMWARE USE

Dasan GPON Routers Command Injection Vulnerability

Dasan · Gigabit Passive Optical Network (GPON) Routers

Date added (CISA)

2022-03-31

Remediation due

2022-04-21

Known ransomware use

Yes

Remediation priority

P1 — known ransomware use · past CISA due date

Description

Dasan GPON Routers contain an authentication bypass vulnerability. When combined with CVE-2018-10561, exploitation can allow an attacker to perform remote code execution.

Source: NVD ↗ · CISA KEV Catalog ↗