TI-2018-07455 CVE-2018-10562 · GHSA-6x97-cqx6-mvmq
An issue was discovered on Dasan GPON home routers.
Priority CRITICAL 100KEV
An issue was discovered on Dasan GPON home routers.
Dasan Networks
Records10All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Dasan Networks records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsRecords
10 records
TI-2018-07454 CVE-2018-10561 · GHSA-9f5c-v3c9-rfhg
An issue was discovered on Dasan GPON home routers.
Priority CRITICAL 100KEV
An issue was discovered on Dasan GPON home routers.
TI-2025-39239 CVE-2025-63206 · GHSA-qxjj-2j7h-cqh2
An authentication bypass issue was discovered in Dasan Switch DS2924 web based interface…
Priority HIGH 82
An authentication bypass issue was discovered in Dasan Switch DS2924 web based interface, firmware versions 1.01.18 and 1.02.00, allowing attackers to gain escalated privileges via storing crafted cookies in the web brow…
TI-2017-13254 CVE-2017-18046 · GHSA-grjw-qj2p-c4f5
Buffer overflow on Dasan GPON ONT WiFi Router H640X 12.02-01121 2.77p1-1124 and…
Priority MEDIUM 50
Buffer overflow on Dasan GPON ONT WiFi Router H640X 12.02-01121 2.77p1-1124 and 3.03p2-1146 devices allows remote attackers to execute arbitrary code via a long POST request to the login_action function in /cgi-bin/login…
TI-2019-06459 CVE-2019-8950 · GHSA-mq5x-9pvh-h33v
The backdoor account dnsekakf2$$ in /bin/login on DASAN H665 devices with firmware…
Priority MEDIUM 47
The backdoor account dnsekakf2$$ in /bin/login on DASAN H665 devices with firmware 1.46p1-0028 allows an attacker to login to the admin account via TELNET.
TI-2023-22657 CVE-2023-42495 · GHSA-2mv5-hhjg-6pj4
OS command injection in Dasan Networks
Priority MEDIUM 45
Dasan Networks - W-Web versions 1.22-1.27 - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
TI-2019-07339 CVE-2019-9974 · GHSA-4qc2-r4q6-vfxr
diag_tool.cgi on DASAN H660RM GPON routers with firmware 1.03-0022 lacks any…
Priority MEDIUM 45
diag_tool.cgi on DASAN H660RM GPON routers with firmware 1.03-0022 lacks any authorization check, which allows remote attackers to run a ping command via a GET request to enumerate LAN devices or crash the router with a…
TI-2019-07341 CVE-2019-9976 · GHSA-w56x-q3jg-3926
The Boa server configuration on DASAN H660RM devices with firmware 1.03-0022 logs POST…
Priority MEDIUM 40
The Boa server configuration on DASAN H660RM devices with firmware 1.03-0022 logs POST data to the /tmp/boa-temp file, which allows logged-in users to read the credentials of administration web interface users.
TI-2018-12701 CVE-2018-17867 · GHSA-qrf5-72j9-529v
The Port Forwarding functionality on DASAN H660GW devices allows remote attackers to…
Priority LOW 38
The Port Forwarding functionality on DASAN H660GW devices allows remote attackers to execute arbitrary code via shell metacharacters in the cgi-bin/adv_nat_virsvr.asp Addr parameter (aka the Local IP Address field).
TI-2019-07340 CVE-2019-9975 · GHSA-w576-7p24-m7pp
DASAN H660RM devices with firmware 1.03-0022 use a hard-coded key for logs encryption.
Priority LOW 36
DASAN H660RM devices with firmware 1.03-0022 use a hard-coded key for logs encryption.