Security Advisory

CVE-2018-10562

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-05-04 03:00:00

Last updated 2025-10-21 23:45:51

Assigner mitre

State PUBLISHED

Description

An issue was discovered on Dasan GPON home routers. Command Injection can occur via the dest_host parameter in a diag_action=ping request to a GponForm/diag_Form URI. Because the router saves ping results in /tmp and transmits them to the user when the user revisits /diag.html, its quite simple to execute commands and retrieve their output.

← Browse all CVEs View on cve.org ↗