{"history":[{"alert":0,"cve":"CVE-2018-10561","id":21710,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.92818, \"percentile\": 0.99832}"},{"alert":0,"cve":"CVE-2018-10561","id":19327,"kind":"epss","observed_at":1794327601,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.92818, \"percentile\": 0.99831}"},{"alert":0,"cve":"CVE-2018-10561","id":17293,"kind":"epss","observed_at":1794241201,"payload":"{\"date\": \"2026-11-09\", \"epss\": 0.92818, \"percentile\": 0.99831}"},{"alert":0,"cve":"CVE-2018-10561","id":15356,"kind":"epss","observed_at":1794154800,"payload":"{\"date\": \"2026-11-08\", \"epss\": 0.92818, \"percentile\": 0.99831}"},{"alert":0,"cve":"CVE-2018-10561","id":13334,"kind":"epss","observed_at":1794068402,"payload":"{\"date\": \"2026-11-07\", \"epss\": 0.92818, \"percentile\": 0.9983}"},{"alert":1,"cve":"CVE-2018-10561","id":12714,"kind":"cna","observed_at":1794003600,"payload":"{\"containers\": {\"adp\": [{\"providerMetadata\": {\"dateUpdated\": \"2024-08-05T07:39:08.323Z\", \"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\"}, \"references\": [{\"name\": \"107053\", \"tags\": [\"vdb-entry\", \"x_refsource_BID\", \"x_transferred\"], \"url\": \"http://www.securityfocus.com/bid/107053\"}, {\"name\": \"44576\", \"tags\": [\"exploit\", \"x_refsource_EXPLOIT-DB\", \"x_transferred\"], \"url\": \"https://www.exploit-db.com/exploits/44576/\"}, {\"tags\": [\"x_refsource_MISC\", \"x_transferred\"], \"url\": \"https://www.vpnmentor.com/blog/critical-vulnerability-gpon-router/\"}], \"title\": \"CVE Program Container\"}, {\"metrics\": [{\"cvssV3_1\": {\"attackComplexity\": \"LOW\", \"attackVector\": \"NETWORK\", \"availabilityImpact\": \"HIGH\", \"baseScore\": 9.8, \"baseSeverity\": \"CRITICAL\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"scope\": \"UNCHANGED\", \"userInteraction\": \"NONE\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"version\": \"3.1\"}}, {\"other\": {\"content\": {\"id\": \"CVE-2018-10561\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2025-02-03T15:41:24.667227Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}, {\"other\": {\"content\": {\"dateAdded\": \"2022-03-31\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-10561\"}, \"type\": \"kev\"}}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-287\", \"description\": \"CWE-287 Improper Authentication\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2025-10-21T23:45:51.827Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"references\": [{\"tags\": [\"government-resource\"], \"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-10561\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2022-03-31T00:00:00.000Z\", \"value\": \"CVE-2018-10561 added to CISA KEV\"}], \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"affected\": [{\"product\": \"n/a\", \"vendor\": \"n/a\", \"versions\": [{\"status\": \"affected\", \"version\": \"n/a\"}]}], \"datePublic\": \"2018-05-03T00:00:00.000Z\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"An issue was discovered on Dasan GPON home routers. It is possible to bypass authentication simply by appending \\\"?images\\\" to any URL of the device that requires authentication, as demonstrated by the /menu.html?images/ or /GponForm/diag_FORM?images/ URI. One can then manage the device.\"}], \"problemTypes\": [{\"descriptions\": [{\"description\": \"n/a\", \"lang\": \"en\", \"type\": \"text\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2019-02-19T10:57:01.000Z\", \"orgId\": \"8254265b-2729-46b6-b9e3-3dfca2d5bfca\", \"shortName\": \"mitre\"}, \"references\": [{\"name\": \"107053\", \"tags\": [\"vdb-entry\", \"x_refsource_BID\"], \"url\": \"http://www.securityfocus.com/bid/107053\"}, {\"name\": \"44576\", \"tags\": [\"exploit\", \"x_refsource_EXPLOIT-DB\"], \"url\": \"https://www.exploit-db.com/exploits/44576/\"}, {\"tags\": [\"x_refsource_MISC\"], \"url\": \"https://www.vpnmentor.com/blog/critical-vulnerability-gpon-router/\"}], \"x_legacyV4Record\": {\"CVE_data_meta\": {\"ASSIGNER\": \"cve@mitre.org\", \"ID\": \"CVE-2018-10561\", \"STATE\": \"PUBLIC\"}, \"affects\": {\"vendor\": {\"vendor_data\": [{\"product\": {\"product_data\": [{\"product_name\": \"n/a\", \"version\": {\"version_data\": [{\"version_value\": \"n/a\"}]}}]}, \"vendor_name\": \"n/a\"}]}}, \"data_format\": \"MITRE\", \"data_type\": \"CVE\", \"data_version\": \"4.0\", \"description\": {\"description_data\": [{\"lang\": \"eng\", \"value\": \"An issue was discovered on Dasan GPON home routers. It is possible to bypass authentication simply by appending \\\"?images\\\" to any URL of the device that requires authentication, as demonstrated by the /menu.html?images/ or /GponForm/diag_FORM?images/ URI. One can then manage the device.\"}]}, \"problemtype\": {\"problemtype_data\": [{\"description\": [{\"lang\": \"eng\", \"value\": \"n/a\"}]}]}, \"references\": {\"reference_data\": [{\"name\": \"107053\", \"refsource\": \"BID\", \"url\": \"http://www.securityfocus.com/bid/107053\"}, {\"name\": \"44576\", \"refsource\": \"EXPLOIT-DB\", \"url\": \"https://www.exploit-db.com/exploits/44576/\"}, {\"name\": \"https://www.vpnmentor.com/blog/critical-vulnerability-gpon-router/\", \"refsource\": \"MISC\", \"url\": \"https://www.vpnmentor.com/blog/critical-vulnerability-gpon-router/\"}]}}}}, \"cveMetadata\": {\"assignerOrgId\": \"8254265b-2729-46b6-b9e3-3dfca2d5bfca\", \"assignerShortName\": \"mitre\", \"cveId\": \"CVE-2018-10561\", \"datePublished\": \"2018-05-04T03:00:00.000Z\", \"dateReserved\": \"2018-04-30T00:00:00.000Z\", \"dateUpdated\": \"2025-10-21T23:45:51.827Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.1\"}"},{"alert":0,"cve":"CVE-2018-10561","id":11116,"kind":"epss","observed_at":1793982001,"payload":"{\"date\": \"2026-11-06\", \"epss\": 0.92818, \"percentile\": 0.9983}"},{"alert":0,"cve":"CVE-2018-10561","id":8862,"kind":"epss","observed_at":1793895600,"payload":"{\"date\": \"2026-11-05\", \"epss\": 0.92818, \"percentile\": 0.9983}"},{"alert":0,"cve":"CVE-2018-10561","id":6650,"kind":"epss","observed_at":1793809200,"payload":"{\"date\": \"2026-11-04\", \"epss\": 0.92818, \"percentile\": 0.9983}"},{"alert":0,"cve":"CVE-2018-10561","id":4427,"kind":"epss","observed_at":1793722800,"payload":"{\"date\": \"2026-11-03\", \"epss\": 0.92818, \"percentile\": 0.9983}"},{"alert":0,"cve":"CVE-2018-10561","id":2209,"kind":"epss","observed_at":1793665375,"payload":"{\"date\": \"2026-11-02\", \"epss\": 0.92818, \"percentile\": 0.9983}"},{"alert":1,"cve":"CVE-2018-10561","id":1164,"kind":"kev","observed_at":1793665375,"payload":"{\"cveID\": \"CVE-2018-10561\", \"cwes\": [\"CWE-287\"], \"dateAdded\": \"2022-03-31\", \"dueDate\": \"2022-04-21\", \"forensicTriage\": \"No\", \"knownRansomwareCampaignUse\": \"Unknown\", \"notes\": \"https://nvd.nist.gov/vuln/detail/CVE-2018-10561\", \"product\": \"Gigabit Passive Optical Network (GPON) Routers\", \"requiredAction\": \"The impacted product is end-of-life and should be disconnected if still in use.\", \"shortDescription\": \"Dasan GPON Routers contain an authentication bypass vulnerability. When combined with CVE-2018-10562, exploitation can allow an attacker to perform remote code execution.\", \"vendorProject\": \"Dasan\", \"vulnerabilityName\": \"Dasan GPON Routers Authentication Bypass Vulnerability\"}"}],"record":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"cna":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-05T07:39:08.323Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"107053","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/107053"},{"name":"44576","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"https://www.exploit-db.com/exploits/44576/"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://www.vpnmentor.com/blog/critical-vulnerability-gpon-router/"}],"title":"CVE Program Container"},{"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}},{"other":{"content":{"id":"CVE-2018-10561","options":[{"Exploitation":"active"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2025-02-03T15:41:24.667227Z","version":"2.0.3"},"type":"ssvc"}},{"other":{"content":{"dateAdded":"2022-03-31","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-10561"},"type":"kev"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-287","description":"CWE-287 Improper Authentication","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2025-10-21T23:45:51.827Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-10561"}],"timeline":[{"lang":"en","time":"2022-03-31T00:00:00.000Z","value":"CVE-2018-10561 added to CISA KEV"}],"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2018-05-03T00:00:00.000Z","descriptions":[{"lang":"en","value":"An issue was discovered on Dasan GPON home routers. It is possible to bypass authentication simply by appending \"?images\" to any URL of the device that requires authentication, as demonstrated by the /menu.html?images/ or /GponForm/diag_FORM?images/ URI. One can then manage the device."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2019-02-19T10:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"107053","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/107053"},{"name":"44576","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"https://www.exploit-db.com/exploits/44576/"},{"tags":["x_refsource_MISC"],"url":"https://www.vpnmentor.com/blog/critical-vulnerability-gpon-router/"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2018-10561","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"An issue was discovered on Dasan GPON home routers. It is possible to bypass authentication simply by appending \"?images\" to any URL of the device that requires authentication, as demonstrated by the /menu.html?images/ or /GponForm/diag_FORM?images/ URI. One can then manage the device."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"107053","refsource":"BID","url":"http://www.securityfocus.com/bid/107053"},{"name":"44576","refsource":"EXPLOIT-DB","url":"https://www.exploit-db.com/exploits/44576/"},{"name":"https://www.vpnmentor.com/blog/critical-vulnerability-gpon-router/","refsource":"MISC","url":"https://www.vpnmentor.com/blog/critical-vulnerability-gpon-router/"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2018-10561","datePublished":"2018-05-04T03:00:00.000Z","dateReserved":"2018-04-30T00:00:00.000Z","dateUpdated":"2025-10-21T23:45:51.827Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"cna_checked":1794003600,"cve":"CVE-2018-10561","description":"An issue was discovered on Dasan GPON home routers. It is possible to bypass authentication simply by appending \"?images\" to any URL of the device that requires authentication, as demonstrated by the /menu.html?images/ or /GponForm/diag_FORM?images/ URI. One can then manage the device.","epss":{"date":"2026-11-12","epss":0.92818,"percentile":0.99832},"epss_checked":1794522003,"first_seen":1793665375,"kev":{"cveID":"CVE-2018-10561","cwes":["CWE-287"],"dateAdded":"2022-03-31","dueDate":"2022-04-21","forensicTriage":"No","knownRansomwareCampaignUse":"Unknown","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-10561","product":"Gigabit Passive Optical Network (GPON) Routers","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","shortDescription":"Dasan GPON Routers contain an authentication bypass vulnerability. When combined with CVE-2018-10562, exploitation can allow an attacker to perform remote code execution.","vendorProject":"Dasan","vulnerabilityName":"Dasan GPON Routers Authentication Bypass Vulnerability"},"kev_checked":1794522003,"products":"n/a n/a","references":["http://www.securityfocus.com/bid/107053","https://www.exploit-db.com/exploits/44576/","https://www.vpnmentor.com/blog/critical-vulnerability-gpon-router/","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-10561"],"score":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","provider":"CISA-ADP","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"solutions":"","state":"PUBLISHED","title":"Dasan GPON Routers Authentication Bypass Vulnerability","updated_at":1794500401,"workarounds":""},"sources":[]}