FiberHome.GPON.ONT.Authenticated.Remote.Command.Injection

description-logoDescription

This indicates an attack attempt against a Remote Command Injection vulnerability in FiberHome GPON ONT.
The vulnerability is due to insufficient sanitizing of user supplied inputs in the application. An authenticated remote attacker may be able to exploit this to execute arbitrary commands within the context of the application.

affected-products-logoAffected Products

FiberHome AN5506 series firmware before RP2603

Impact logoImpact

System Compromise: Remote attackers can gain control of vulnerable systems.

recomended-action-logoRecommended Actions

Apply the most recent upgrade or patch from the individual vendors.

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)

Version Updates

Date Version Detail
2021-03-23 18.043 Default_action:pass:drop
2021-02-16 17.017