Vulnerability identifier: #VU12661

Vulnerability risk: High

CVSSv3.1: 9.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:H/RL:O/RC:C]

CVE-ID: CVE-2018-10562

CWE-ID: CWE-77

Exploitation vector: Network

Exploits in database: 7

• March 18, 2020
  • Pingpon-Exploit (Exploit for Mass Remote Code Execution on GPON home routers (CVE-2018-10562) obtained from Shodan.) [Github]
  • GPON_RCE (Exploit for Remote Code Execution on GPON home routers (CVE-2018-10562) written in Python.) [Github]
  • CVE-2018-10562 (Exploit for CVE-2018-10562) [Github]
  • GPON-home-routers-Exploit (RCE on GPON home routers (CVE-2018-10561)) [Github]
  • GPON (Exploit for Remote Code Execution on GPON home routers (CVE-2018-10562) written in Python. Initially disclosed by VPNMentor (https://www.vpnmentor.com/blog/critical-vulnerability-gpon-router/), kudos for their work.) [Github]
  • GPON-LOADER (Exploit loader for Remote Code Execution w/ Payload on GPON Home Gateway devices (CVE-2018-10562) written in Python.) [Github]
  • labs (Vulnerability Labs for security analysis) [Github]

Impact: Code execution

Vulnerable software:
GPON
Hardware solutions / Routers for home users

Vendor: Dasan Networks