CVE-2019-9974: Dasannetworks h660rm Firmware

Critical severity, CVSS 9.1. EPSS: 2.9% chance of exploitation in the next 30 days.

diag_tool.cgi on DASAN H660RM GPON routers with firmware 1.03-0022 lacks any authorization check, which allows remote attackers to run a ping command via a GET request to enumerate LAN devices or crash the router with a DoS attack.

Affected products

Published 2019-04-11. Last modified 2026-06-17.