CVE-2018-10561
An issue was discovered on Dasan GPON home routers. It is possible to bypass authentication simply by appending "?images" to any URL of the device that requires authentication, …
Published: 2018-05-04 · CVSS: 9.8 · CVSS 3.1
An issue was discovered on Dasan GPON home routers. It is possible to bypass authentication simply by appending "?images" to any URL of the device that requires authentication, as demonstrated by the /menu.html?images/ or /GponForm/diag_FORM?images/ URI. One can then manage the device.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7