Vulnerability identifier: #VU12660

Vulnerability risk: Critical

CVSSv3.1: 9.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:H/RL:O/RC:C]

CVE-ID: CVE-2018-10561

CWE-ID: CWE-592

Exploitation vector: Network

Exploits in database: 4

• June 17, 2021
  • Alcatel-Lucent (Nokia) GPON I-240W-Q - Buffer Overflow [Exploit-DB]
• March 18, 2020
  • CVE-2018-10562 (Exploit for CVE-2018-10562) [Github]
  • GPON (Exploit for Remote Code Execution on GPON home routers (CVE-2018-10562) written in Python. Initially disclosed by VPNMentor (https://www.vpnmentor.com/blog/critical-vulnerability-gpon-router/), kudos for their work.) [Github]
  • GPON-home-routers-Exploit (RCE on GPON home routers (CVE-2018-10561)) [Github]

Impact: Code execution

Vulnerable software:
GPON
Hardware solutions / Routers for home users

Vendor: Dasan Networks