DASAN Networks H660RM Firmware 1.03-0022

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:dasannetworks:h660rm_firmware:1.03-0022:*:*:*:*:*:*:*

part: o version: 1.03-0022 update: *

VendorDasannetworks (32237a59-148e-5709-b379-b9268e729f8e)
ProductH660Rm Firmware (35905b84-f167-500b-a823-db9d1ec345ed)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-9976 vulnerable 2026-06-08 05:14:26.742714 Details available
The Boa server configuration on DASAN H660RM devices with firmware 1.03-0022 logs POST data to the /tmp/boa-temp file, which allows logged-in users to read the credentials of administration web interface users.
Published: 2019-04-11T18:17:14.000Z
Updated: 2024-08-04T22:10:08.653Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9975 vulnerable 2026-06-08 05:14:26.742378 Details available
DASAN H660RM devices with firmware 1.03-0022 use a hard-coded key for logs encryption. Data stored using this key can be decrypted by anyone able to access this key.
Published: 2019-04-11T18:08:07.000Z
Updated: 2024-08-04T22:10:08.784Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9974 vulnerable 2026-06-08 05:14:26.741333 Details available
diag_tool.cgi on DASAN H660RM GPON routers with firmware 1.03-0022 lacks any authorization check, which allows remote attackers to run a ping command via a GET request to enumerate LAN devices or crash the router with a DoS attack.
Published: 2019-04-11T18:01:44.000Z
Updated: 2024-08-04T22:10:09.295Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.