Dasan Networks GPON ONT WiFi Router H64X Series Authentication Bypass
Posted by deepcore on July 14, 2017 – 9:30 pm
Dasan Networks GPON ONT WiFi Router H64X Series does not properly perform authentication and authorization, allowing it to be bypassed through cookie manipulation. Setting the Cookie ‘Grant’ with value 1 (user) or 2 (admin) will bypass security controls in place enabling the attacker to take full control of the device management interface.
Post a reply
You must be logged in to post a comment.