Security Advisory
CVE-2019-9974
9.1
CRITICAL
Vulnerability Description
diag_tool.cgi on DASAN H660RM GPON routers with firmware 1.03-0022 lacks any authorization check, which allows remote attackers to run a ping command via a GET request to enumerate LAN devices or crash the router with a DoS attack.
Published Date
April 11, 2019
Official Source
NIST NVD Advisory