Authentication Bypass in Dasan GPON Routers (CVE‑2018‑10561) Enables Remote Code Execution
What It Is — Dasan Gigabit Passive Optical Network (GPON) routers contain an authentication bypass flaw (CVE‑2018‑10561). When chained with CVE‑2018‑10562, an attacker can bypass login controls and execute code remotely.
Exploitability — Publicly disclosed; proof‑of‑concept code exists. The combined attack vector is considered high severity (CVSS ≈ 7.5).
Affected Products — Dasan GPON routers (various firmware versions).
Why It Matters for Trust & Control Assurance
- Tests the access‑control control objective: robust authentication mechanisms must be verifiable and continuously monitored.
- Demonstrates the need for continuous vendor‑device oversight; evidence of patched firmware is a key audit artifact.
- Highlights the importance of log integrity and alerting to detect unauthorized access attempts on network infrastructure.
Recommended Actions
- Inventory all Dasian GPON routers and verify firmware versions.
- Apply Dasan’s security patch for CVE‑2018‑10561 (and CVE‑2018‑10562) immediately.
- Enable strict logging of authentication events and integrate logs into a SIEM for real‑time monitoring.
- Conduct a focused vulnerability scan on the GPON segment to confirm remediation.
- Update access‑control policies to require multi‑factor authentication for management interfaces where possible.
Source: CISA KEV – CVE‑2018‑10561