[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fnXr1mlCVUO0YBObOLVQOHoBtkX_RkvQX8eyHrHCna3s":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":58,"kevVulnerabilities":105,"topProductsByCves":114,"seoMetadata":125,"meta":134},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":57},7249,"dasannetworks",11,9,2,5,"2023-12-13","d",[16,23,26,30,33,37,41,44,47,51,54],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":21,"last_cve_update":22},31788,"h660rm_firmware",1,3,0,"2019-04-11",{"id":24,"product_name":25,"version_count":21,"cve_count":20,"kev_count":21,"last_cve_update":22},31787,"h660rm",{"id":27,"product_name":28,"version_count":21,"cve_count":11,"kev_count":11,"last_cve_update":29},31782,"gpon_router_firmware","2018-05-04",{"id":31,"product_name":32,"version_count":21,"cve_count":11,"kev_count":11,"last_cve_update":29},31781,"gpon_router",{"id":34,"product_name":35,"version_count":21,"cve_count":19,"kev_count":21,"last_cve_update":36},31786,"h660gw_firmware","2018-10-01",{"id":38,"product_name":39,"version_count":21,"cve_count":19,"kev_count":21,"last_cve_update":40},31789,"h665","2019-02-20",{"id":42,"product_name":43,"version_count":19,"cve_count":19,"kev_count":21,"last_cve_update":40},31790,"h665_firmware",{"id":45,"product_name":46,"version_count":21,"cve_count":19,"kev_count":21,"last_cve_update":13},31791,"w-web",{"id":48,"product_name":49,"version_count":21,"cve_count":19,"kev_count":21,"last_cve_update":50},31783,"h640x","2018-01-21",{"id":52,"product_name":53,"version_count":20,"cve_count":19,"kev_count":21,"last_cve_update":50},31784,"h640x_firmware",{"id":55,"product_name":56,"version_count":21,"cve_count":19,"kev_count":21,"last_cve_update":36},31785,"h660gw","Dasannetworks is a technology vendor with 11 tracked products and 9 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[59,66,70,76,82,87,91,95,100],{"cveId":60,"description":61,"publishedDate":29,"cvssScore":62,"cvssVersion":63,"severity":64,"isKev":4,"epssScore":65},"CVE-2018-10562","An issue was discovered on Dasan GPON home routers. Command Injection can occur via the dest_host parameter in a diag_action=ping request to a GponForm\u002Fdiag_Form URI. Because the router saves ping results in \u002Ftmp and transmits them to the user when the user revisits \u002Fdiag.html, it's quite simple to execute commands and retrieve their output.",9.8,"v3.1","Critical",0.99949,{"cveId":67,"description":68,"publishedDate":29,"cvssScore":62,"cvssVersion":63,"severity":64,"isKev":4,"epssScore":69},"CVE-2018-10561","An issue was discovered on Dasan GPON home routers. It is possible to bypass authentication simply by appending \"?images\" to any URL of the device that requires authentication, as demonstrated by the \u002Fmenu.html?images\u002F or \u002FGponForm\u002Fdiag_FORM?images\u002F URI. One can then manage the device.",0.92818,{"cveId":71,"description":72,"publishedDate":50,"cvssScore":62,"cvssVersion":73,"severity":64,"isKev":74,"epssScore":75},"CVE-2017-18046","Buffer overflow on Dasan GPON ONT WiFi Router H640X 12.02-01121 2.77p1-1124 and 3.03p2-1146 devices allows remote attackers to execute arbitrary code via a long POST request to the login_action function in \u002Fcgi-bin\u002Flogin_action.cgi (aka cgipage.cgi).","v3.0",false,0.05045,{"cveId":77,"description":78,"publishedDate":36,"cvssScore":79,"cvssVersion":73,"severity":80,"isKev":74,"epssScore":81},"CVE-2018-17867","The Port Forwarding functionality on DASAN H660GW devices allows remote attackers to execute arbitrary code via shell metacharacters in the cgi-bin\u002Fadv_nat_virsvr.asp Addr parameter (aka the Local IP Address field).",7.2,"High",0.03799,{"cveId":83,"description":84,"publishedDate":22,"cvssScore":85,"cvssVersion":73,"severity":64,"isKev":74,"epssScore":86},"CVE-2019-9974","diag_tool.cgi on DASAN H660RM GPON routers with firmware 1.03-0022 lacks any authorization check, which allows remote attackers to run a ping command via a GET request to enumerate LAN devices or crash the router with a DoS attack.",9.1,0.02924,{"cveId":88,"description":89,"publishedDate":40,"cvssScore":62,"cvssVersion":73,"severity":64,"isKev":74,"epssScore":90},"CVE-2019-8950","The backdoor account dnsekakf2$$ in \u002Fbin\u002Flogin on DASAN H665 devices with firmware 1.46p1-0028 allows an attacker to login to the admin account via TELNET.",0.02857,{"cveId":92,"description":93,"publishedDate":13,"cvssScore":62,"cvssVersion":63,"severity":64,"isKev":74,"epssScore":94},"CVE-2023-42495","\nDasan Networks - W-Web versions 1.22-1.27 - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\n\n",0.01465,{"cveId":96,"description":97,"publishedDate":22,"cvssScore":98,"cvssVersion":73,"severity":80,"isKev":74,"epssScore":99},"CVE-2019-9975","DASAN H660RM devices with firmware 1.03-0022 use a hard-coded key for logs encryption. Data stored using this key can be decrypted by anyone able to access this key.",7.5,0.01328,{"cveId":101,"description":102,"publishedDate":22,"cvssScore":103,"cvssVersion":73,"severity":80,"isKev":74,"epssScore":104},"CVE-2019-9976","The Boa server configuration on DASAN H660RM devices with firmware 1.03-0022 logs POST data to the \u002Ftmp\u002Fboa-temp file, which allows logged-in users to read the credentials of administration web interface users.",8.8,0.01007,[106,111],{"cveId":67,"description":68,"publishedDate":29,"cvssScore":62,"cvssVersion":63,"severity":64,"isKev":4,"epssScore":69,"cisaVulnName":107,"cisaDateAdded":108,"cisaShortDescription":109,"cisaRequiredAction":110},"Dasan GPON Routers Authentication Bypass Vulnerability","2022-03-31","Dasan GPON Routers contain an authentication bypass vulnerability. When combined with CVE-2018-10562, exploitation can allow an attacker to perform remote code execution.","The impacted product is end-of-life and should be disconnected if still in use.",{"cveId":60,"description":61,"publishedDate":29,"cvssScore":62,"cvssVersion":63,"severity":64,"isKev":4,"epssScore":65,"cisaVulnName":112,"cisaDateAdded":108,"cisaShortDescription":113,"cisaRequiredAction":110},"Dasan GPON Routers Command Injection Vulnerability","Dasan GPON Routers contain an authentication bypass vulnerability. When combined with CVE-2018-10561, exploitation can allow an attacker to perform remote code execution.",[115,116,117,118,119,120,121,122,123,124],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":21,"last_cve_update":22},{"id":24,"product_name":25,"version_count":21,"cve_count":20,"kev_count":21,"last_cve_update":22},{"id":27,"product_name":28,"version_count":21,"cve_count":11,"kev_count":11,"last_cve_update":29},{"id":31,"product_name":32,"version_count":21,"cve_count":11,"kev_count":11,"last_cve_update":29},{"id":34,"product_name":35,"version_count":21,"cve_count":19,"kev_count":21,"last_cve_update":36},{"id":38,"product_name":39,"version_count":21,"cve_count":19,"kev_count":21,"last_cve_update":40},{"id":42,"product_name":43,"version_count":19,"cve_count":19,"kev_count":21,"last_cve_update":40},{"id":45,"product_name":46,"version_count":21,"cve_count":19,"kev_count":21,"last_cve_update":13},{"id":48,"product_name":49,"version_count":21,"cve_count":19,"kev_count":21,"last_cve_update":50},{"id":52,"product_name":53,"version_count":20,"cve_count":19,"kev_count":21,"last_cve_update":50},{"title":126,"metaDescription":127,"keywords":128,"structuredData":129},"Dasannetworks - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Dasannetworks covering 11 products with 9 tracked vulnerabilities including 2 critical and 0 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Dasannetworks vulnerabilities, Dasannetworks security, Dasannetworks CVE, Dasannetworks threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking, Dasannetworks KEV, Dasannetworks exploited vulnerabilities",{"@context":130,"@type":131,"name":132,"description":127,"url":133},"https:\u002F\u002Fschema.org","Organization","Dasannetworks","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fdasannetworks",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":135,"apiVersion":136},"2026-10-19T13:00:57.398Z","3.0"]