GPON ONT Home Gateway Router is vulnerable to authentication bypass (CVE-2018-10561)
High Nessus Plugin ID 119776
Synopsis
The remote host is affected by an authentication bypass vulnerability.
Description
An issue was discovered in GPON ONT Home Gateway Router web administration interface. It is possible to bypass authentication of web interface by using the following approach:
- http(s)://<Router IP>/<some file>?images/
- http(s)://<Router IP>/<some file>?style/
- http(s)://<Router IP>/<some file>?script/
- http(s)://<Router IP>/images/../<some file>
- http(s)://<Router IP>/style/../<some file>
- http(s)://<Router IP>/script/../<some file> For example, '/menu.html?images/' or '/GponForm/diag_FORM?images/' URI.
This allows an attacker to fully control the target device.
Solution
Consult your vendor for a patch or a workaround.