CVE-2018-10561—Dasan GPON Routers Authentication Bypass Vulnerability

Vulnerability Name

Dasan GPON Routers Authentication Bypass Vulnerability

Description

Dasan GPON Routers contain an authentication bypass vulnerability. When combined with CVE-2018-10562, exploitation can allow an attacker to perform remote code execution.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:

Unknown

Action

The impacted product is end-of-life and should be disconnected if still in use.

Additional Notes

• https://nvd.nist.gov/vuln/detail/CVE-2018-10561

Related News Articles

• Hackers Exploit Samsung MagicINFO, GeoVision IoT Flaws to Deploy Mirai BotnetMay 6, 2025
• New Aquabot Botnet Exploits CVE-2024-41710 in Mitel Phones for DDoS AttacksJanuary 30, 2025
• New Aquabotv3 botnet malware targets Mitel command injection flawJanuary 30, 2025
• AndroxGh0st Malware Integrates Mozi Botnet to Target IoT and Cloud ServicesNovember 8, 2024

Related Weaknesses

• CWE-287