CVE-2019-9974

diag_tool.cgi on DASAN H660RM GPON routers with firmware 1.03-0022 lacks any authorization check, which allows remote attackers to run a ping command via a GET request to enumerate LAN devices or crash the router with a DoS attack.

• CWE-306
• CWE-862

• http://packetstormsecurity.com/files/152232/DASAN-H660RM-Information-Disclosure-Hardcoded-Key.htmlThird Party Advisory, VDB Entry
• https://blog.burghardt.pl/2019/03/diag_tool-cgi-on-dasan-h660rm-devices-with-firmware-1-03-0022-allows-spawning-ping-processes-without-any-authorization-leading-to-information-disclosure-and-dos-attacks/Exploit, Third Party Advisory
• https://seclists.org/bugtraq/2019/Mar/41Mailing List, Third Party Advisory
• http://packetstormsecurity.com/files/152232/DASAN-H660RM-Information-Disclosure-Hardcoded-Key.htmlThird Party Advisory, VDB Entry
• https://blog.burghardt.pl/2019/03/diag_tool-cgi-on-dasan-h660rm-devices-with-firmware-1-03-0022-allows-spawning-ping-processes-without-any-authorization-leading-to-information-disclosure-and-dos-attacks/Exploit, Third Party Advisory
• https://seclists.org/bugtraq/2019/Mar/41Mailing List, Third Party Advisory

Published

Apr 11, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-9967XnView Classic 2.48 on Windows allows remote attackers to ca…
• CVE-2019-9968XnView Classic 2.48 on Windows allows remote attackers to ca…
• CVE-2019-9969XnView Classic 2.48 on Windows allows remote attackers to ca…
• CVE-2019-9970Open Whisper Signal (aka Signal-Desktop) through 1.23.1 and …
• CVE-2019-9971PhoneSystem Terminal in 3CX Phone System (Debian based insta…8.8
• CVE-2019-9972PhoneSystem Terminal in 3CX Phone System (Debian based insta…8.8
• CVE-2019-9975DASAN H660RM devices with firmware 1.03-0022 use a hard-code…
• CVE-2019-9976The Boa server configuration on DASAN H660RM devices with fi…
• CVE-2019-9977The renderer process in the entertainment system on Tesla Mo…
• CVE-2019-9978The social-warfare plugin before 3.5.3 for WordPress has sto…6.1
• CVE-2019-9983Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…