ACTIVELY EXPLOITED
CVE-2018-10562: Dasan GPON Routers Command Injection Vulnerability
| Vendor | Dasan |
|---|---|
| Product | Gigabit Passive Optical Network (GPON) Routers |
| Actively exploited | Yes |
| Added to CISA KEV | 31 Mar 2022 |
| CISA federal deadline | 21 Apr 2022 |
| Ransomware use | Known |
| Weakness (CWE) | CWE-78 |
Required action (CISA's text)
The impacted product is end-of-life and should be disconnected if still in use.
Description (NVD)
Dasan GPON Routers contain an authentication bypass vulnerability. When combined with CVE-2018-10561, exploitation can allow an attacker to perform remote code execution.
SOURCES
Other Dasan flaws
Data from NVD, CISA KEV, FIRST EPSS and vendor advisories. Updated 10 Nov 2026.