Read the docs

Dasan Networks

Records10All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Dasan Networks records in CISA KEV
TI-2018-07454 Dasan GPON Routers Authentication Bypass Vulnerability Priority CRITICAL 100KEV 2022-03-31TI-2018-07455 Dasan GPON Routers Command Injection Vulnerability Priority CRITICAL 100KEV 2022-03-31

Components

Products in the NVD configurations · select one to filter the records
H660rm Firmware 3 records MEDIUM Gpon Router Firmware 2 records CRITICAL Ds2924 Firmware 1 record HIGH H640x Firmware 1 record MEDIUM H660gw Firmware 1 record LOW H665 Firmware 1 record MEDIUM W-web 1 record MEDIUM

Records

1 record in W-web · all components

TI-2023-22657 CVE-2023-42495 · GHSA-2mv5-hhjg-6pj4

OS command injection in Dasan Networks

Priority MEDIUM 45

Dasan Networks - W-Web versions 1.22-1.27 - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01465 Published 2023-12-13 Fixed in Upgrade to the latest version. CWE-78
Open these records in search →