CVE-2018-10562 - CVE House
Back to Database
Status published Unknown CVE-2018-10562

An issue was discovered on Dasan GPON home routers. Command...

Vulnerability Description

An issue was discovered on Dasan GPON home routers. Command Injection can occur via the dest_host parameter in a diag_action=ping request to a GponForm/diag_Form URI. Because the router saves ping results in /tmp and transmits them to the user when the user revisits /diag.html, it's quite simple to execute commands and retrieve their output.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-10562

Credits & Attribution

No credits recorded in the NVD database.

References

More from dasannetworks

View All →
CVE-2019-9976
The Boa server configuration on DASAN H660RM devices with firmware...
High 8.8
CVE-2019-9975
DASAN H660RM devices with firmware 1.03-0022 use a hard-coded key...
High 7.5
CVE-2019-9974
diag_tool.cgi on DASAN H660RM GPON routers with firmware 1.03-0022 lacks...
Critical 9.1
CVE-2019-8950
The backdoor account dnsekakf2$$ in /bin/login on DASAN H665 devices...
Critical 9.8
CVE-2018-17867
The Port Forwarding functionality on DASAN H660GW devices allows remote...
High 7.2

Affected Vendor

dasannetworks

View all reports →

Affected Software

gpon router firmware
Vulnerable Versions:
Unknown

Timeline

Official Publish: May 4th, 2018
Last Modified: October 21st, 2025
Added to House: July 20th, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.