CVE report
CVE-2018-10562criticalKEV
Dasan GPON Devices - Remote Code Execution
Events 90d
523
Distinct IPs
468
Severity
critical
CISA KEV
Actively exploited
Detection signature
An event counts toward CVE-2018-10562 when its URL path contains any of these (case-insensitive). This is what our matching is based on.
- · /GponForm/diag_Form
Pre-disclosure activity
all early actors →Analysing probe history around the publication date…
Recent probe volume (last 7 days)
peak: 171 events/dayeventsdistinct IPs
Downloads & integrations
Top sources probing for CVE-2018-10562
- 89.58.31.649 eventsGermany· netcup GmbH
- 192.142.28.778 eventsThe Netherlands· Hostpalace Datacenters Ltd
- 45.153.34.2318 eventsThe Netherlands· TechTies Inc.
- 201.43.224.1695 eventsBrazil· TELEFONICA BRASIL S.A
- 45.156.87.2135 eventsThe Netherlands· TechTies Inc.
- 91.92.40.345 eventsThe Netherlands· TechTies Inc.
- 60.49.28.1193 eventsMalaysia· TM TECHNOLOGY SERVICES SDN. BHD.
- 203.3.90.142 eventsIndonesia· PT Meta Akses Indonesia
- 23.94.112.32 eventsUnited States· HostPapa
- 91.92.42.1262 eventsSweden· Kamatera Inc
- 102.18.32.622 eventsMadagascar· Telecom-Malagasy
- 101.36.125.582 eventsHong Kong· UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 45.71.14.2042 eventsBrazil· MILANIN NET
- 14.205.104.2002 eventsChina· CHINA UNICOM China169 Backbone
- 45.153.34.2522 eventsThe Netherlands· TechTies Inc.
- 140.233.190.472 eventsUnited States· Internet Magnate (Pty) Ltd
- 200.95.200.242 eventsBrazil· Oquei Telecom Ltda
- 131.0.235.1312 eventsArgentina· MUSURIT
- 120.28.196.152 eventsPhilippines· Globe Telecom Inc.
- 94.154.43.872 eventsThe Netherlands· Storm Industries LLC
- 175.110.19.712 eventsYemen· Public Telecommunication Corporation
- 109.224.242.2442 eventsTürkiye· High Speed For Internet Services L.L.C
- 60.246.15.252 eventsMacao· Companhia de Telecomunicacoes de Macau SARL
- 115.171.80.2532 eventsChina· China Networks Inter-Exchange
- 202.188.137.422 eventsMalaysia· TM TECHNOLOGY SERVICES SDN. BHD.
- 141.148.201.972 eventsIndia· Oracle Corporation
- 103.240.242.41 eventsLaos· Lao Telecom Communication, LTC
- 45.177.80.1551 eventsArgentina· WABCOM S.A.S.
- 103.165.157.1531 eventsIndonesia· MEGADATA-ISP
- 180.191.1.501 eventsPhilippines· Globe Telecom Inc.
Top networks the attempts come from
- AS14593 Space Exploration Technologies Corporation45 IPs · 45 ev
- AS9541 Cyber Internet Services Pvt Ltd.33 IPs · 33 ev
- AS9299 Philippine Long Distance Telephone Company21 IPs · 21 ev
- AS197170 TechTies Inc.4 IPs · 20 ev
- AS4837 CHINA UNICOM China169 Backbone12 IPs · 13 ev
- AS197540 netcup GmbH2 IPs · 10 ev
- AS7713 PT Telekomunikasi Indonesia10 IPs · 10 ev
- AS138423 CMPak Limited9 IPs · 9 ev
- AS4788 TM TECHNOLOGY SERVICES SDN. BHD.5 IPs · 8 ev
- AS14754 TELECOMUNICACIONES DE GUATEMALA, SOCIEDAD ANONIMA8 IPs · 8 ev
Fingerprints of the clients exploiting this
The HTTP (JA4H) and TLS (JA4) fingerprints seen on these attempts. Click one to see the whole population that carries it.
Sample request paths observed
- /GponForm/diag_Form?script/
- /GponForm/diag_Form?images/
- /GponForm/diag_Form?style/