[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fdgqWX8DYisd2m15qF85du8IECkldkMloszTFOWAp7lk":3,"g5a-risk:CVE-2018-10561":143},{"success":4,"data":5,"meta":141},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":46,"epssPercentile":27,"epssTimeSeries":47,"severity":49,"affectedProducts":50,"affectedProductsCount":59,"references":60,"referencesCount":89,"weaknesses":90,"weaknessesCount":98,"isActivelyExploited":4,"cisaInfo":99,"otxData":27,"relatedBlogPosts":100,"seoMetadata":101,"configurations":126,"relatedVendorCves":139,"notableEvents":140},"CVE-2018-10561","What is CVE-2018-10561?","An issue was discovered on Dasan GPON home routers. It is possible to bypass authentication simply by appending \"?images\" to any URL of the device that requires authentication, as demonstrated by the \u002Fmenu.html?images\u002F or \u002FGponForm\u002Fdiag_FORM?images\u002F URI. One can then manage the device.","An issue was discovered on Dasan GPON home routers. It is possible to bypass authentication simply by appending \"?images\" to any URL of the device that requi...","2018-05-04T03:29:00.227","2025-11-05T19:23:25.363",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":34,"CVSSMetricV2":35,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},[],[36],{"Source":17,"Type":18,"CVSSData":37,"BaseSeverity":25,"ExploitabilityScore":43,"ImpactScore":44,"ACInsufInfo":4,"ObtainAllPrivilege":45,"ObtainUserPrivilege":45,"ObtainOtherPrivilege":45,"UserInteractionRequired":45},{"Version":38,"VectorString":39,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":40,"IntegrityImpact":40,"AvailabilityImpact":40,"BaseScore":41,"BaseSeverity":42,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,"",10,6.4,false,0.92818,[48,46,46,46,46,46,46],0.92893,"Critical",[51,56],{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"dasannetworks","gpon_router_firmware","-","cpe:2.3:o:dasannetworks:gpon_router_firmware:-:*:*:*:*:*:*:*",{"vendor":52,"product":57,"version":54,"criteria":58,"vulnerable":45},"gpon_router","cpe:2.3:h:dasannetworks:gpon_router:-:*:*:*:*:*:*:*",2,[61,68,73,78,80,82,84],{"url":62,"source":63,"tags":64},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F107053","Securityfocus",[65,66,67],"Broken Link","Third Party Advisory","VDB Entry",{"url":69,"source":70,"tags":71},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F44576\u002F","Exploit-db",[72,66,67],"Exploit",{"url":74,"source":75,"tags":76},"https:\u002F\u002Fwww.vpnmentor.com\u002Fblog\u002Fcritical-vulnerability-gpon-router\u002F","Vpnmentor",[72,77,66],"Technical Description",{"url":62,"source":63,"tags":79},[65,66,67],{"url":69,"source":70,"tags":81},[72,66,67],{"url":74,"source":75,"tags":83},[72,77,66],{"url":85,"source":86,"tags":87},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2018-10561","CISA",[88],"US Government Resource",7,[91],{"id":92,"name":93,"description":94,"extendedDescription":42,"status":95,"abstraction":96,"structure":97},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","Draft","Class","Simple",1,{"shortDescription":42,"requiredAction":42,"vulnerabilityName":42,"dateAdded":27},[],{"title":102,"metaDescription":103,"keywords":104,"canonicalUrl":105,"structuredData":106},"What is CVE-2018-10561? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-10561, a critical severity cyber security vulnerability from 2018. High exploit probability (92.8%). An issue was discover...","CVE-2018-10561, CVE-2018-10561 vulnerability, CVE-2018-10561 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, dasannetworks security, gpon_router_firmware vulnerability, gpon_router vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2018-10561",{"@context":107,"@type":108,"headline":102,"description":103,"datePublished":10,"dateModified":11,"author":109,"publisher":113,"about":117,"mainEntityOfPage":121,"articleSection":124,"keywords":125},"https:\u002F\u002Fschema.org","TechArticle",{"@type":110,"name":111,"url":112},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":110,"name":111,"url":112,"logo":114},{"@type":115,"url":116},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":118,"name":6,"description":119,"additionalType":120},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":122,"@id":123},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-10561","Cybersecurity","CVE-2018-10561, CVE-2018-10561 vulnerability, CVE-2018-10561 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[127],{"Operator":128,"Negate":27,"Nodes":129},"AND",[130,135],{"Operator":131,"Negate":45,"CPEMatch":132},"OR",[133],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":134,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"8153A5BC-B257-4774-8106-E77FA2239A99",{"Operator":131,"Negate":45,"CPEMatch":136},[137],{"Vulnerable":45,"Criteria":58,"MatchCriteriaID":138,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"E795B673-4FC0-4A2B-821E-63F87B90D6C6",[],[],{"lastModified":11,"cacheTime":142,"version":38},1792418430406,{"score":144,"band":49,"action":145,"scoredAt":146},90,"Emergency patch","2026-10-19T06:56:45.20275+00:00"]