CVE-2018-10562: Dasan GPON Devices - Remote Code Execution

HoneyLabs honeypots recorded 114 probes matching CVE-2018-10562 from 18 distinct source IP addresses in the last 7 days. Severity is rated critical.

This CVE is on CISA's Known Exploited Vulnerabilities list. CISA added it on 2022-03-31.

Request paths that identify it

  • /GponForm/diag_Form

Addresses probing it

Source IPProbesNetworkCountry
213.209.159.17595Feo Prest SRLGermany
176.65.139.1603Storm Industries LLCGermany
103.26.82.841Cyber Internet Services (Pvt) Ltd.Pakistan
103.82.120.1931FIBERISH (PVT) LTDPakistan
110.38.247.851Galaxy BroadbandPakistan
111.92.157.2491Multinet BroadbandPakistan
112.253.124.1061CHINA UNICOM China169 BackboneChina
119.73.7.991IX Peering for Mobilink and Link Direct International.Pakistan

Networks it comes from

ASNOrganisationProbesSource IPs
AS208137Feo Prest SRL951
AS9541Cyber Internet Services (Pvt) Ltd.55
AS219502Storm Industries LLC31
AS266702MEGALINK S.R.L.22
AS4837CHINA UNICOM China169 Backbone22
AS135523Multinet Broadband11

Where it comes from

CountryProbes
Germany98
Pakistan11
Argentina2
China2
Brazil1

Captured requests

  • /GponForm/diag_Form?images/

HTTP client fingerprints

  • b11cuq040_00040811_2daa70d6
  • b11cuq060_00040817_a9482ae2
  • b11cun060_0004003d_f55b17ef

CVE report

CVE report

Open a specific CVE from the CVE tracker.