High severity7.2NVD Advisory· Published Oct 1, 2018· Updated Jun 17, 2026

CVE-2018-17867

Description

The Port Forwarding functionality on DASAN H660GW devices allows remote attackers to execute arbitrary code via shell metacharacters in the cgi-bin/adv_nat_virsvr.asp Addr parameter (aka the Local IP Address field).

Affected products

Dasan/H660GWllm-fuzzy

Patches

Vulnerability mechanics

References

wojciechregula.blog/authenticated-rce-in-dasan-routers/nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000