Vulnerabilities

TI-2019-07341 CVE-2019-9976 · GHSA-w56x-q3jg-3926

The Boa server configuration on DASAN H660RM devices with firmware 1.03-0022 logs POST…

MEDIUM 40

The Boa server configuration on DASAN H660RM devices with firmware 1.03-0022 logs POST data to the /tmp/boa-temp file, which allows logged-in users to read the credentials of administration web interface users.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01007 Published 2019-04-11 No fix listed CWE-532

TI-2019-07340 CVE-2019-9975 · GHSA-w576-7p24-m7pp

DASAN H660RM devices with firmware 1.03-0022 use a hard-coded key for logs encryption.

LOW 36

DASAN H660RM devices with firmware 1.03-0022 use a hard-coded key for logs encryption.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01328 Published 2019-04-11 No fix listed CWE-798

TI-2019-07339 CVE-2019-9974 · GHSA-4qc2-r4q6-vfxr

diag_tool.cgi on DASAN H660RM GPON routers with firmware 1.03-0022 lacks any…

MEDIUM 45

diag_tool.cgi on DASAN H660RM GPON routers with firmware 1.03-0022 lacks any authorization check, which allows remote attackers to run a ping command via a GET request to enumerate LAN devices or crash the router with a…

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.02924 Published 2019-04-11 No fix listed CWE-306

Vulnerabilities

Filters

The Boa server configuration on DASAN H660RM devices with firmware 1.03-0022 logs POST…

DASAN H660RM devices with firmware 1.03-0022 use a hard-coded key for logs encryption.

diag_tool.cgi on DASAN H660RM GPON routers with firmware 1.03-0022 lacks any…