Lucene search

[email protected]NVD:CVE-2018-10562

HistoryMay 04, 2018 - 3:29 a.m.

CVE-2018-10562

2018-05-0403:29:00

CWE-78

[email protected]

web.nvd.nist.gov

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.974

Percentile

99.9%

JSON

An issue was discovered on Dasan GPON home routers. Command Injection can occur via the dest_host parameter in a diag_action=ping request to a GponForm/diag_Form URI. Because the router saves ping results in /tmp and transmits them to the user when the user revisits /diag.html, it’s quite simple to execute commands and retrieve their output.

Affected configurations

Nvd

Node

dasannetworksgpon_router_firmwareMatch-

AND

dasannetworksgpon_routerMatch-

VendorProductVersionCPE
dasannetworksgpon_router_firmware-cpe:2.3:o:dasannetworks:gpon_router_firmware:-:*:*:*:*:*:*:*
dasannetworksgpon_router-cpe:2.3:h:dasannetworks:gpon_router:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
dasannetworks	gpon_router_firmware	-	cpe:2.3:o:dasannetworks:gpon_router_firmware:-:::::::*
dasannetworks	gpon_router	-	cpe:2.3:h:dasannetworks:gpon_router:-:::::::*