Hinet
10 CVEs across 5 Hinet products. Browse Hinet vulnerabilities, severities, and proof-of-concept exploits.
Hinet products with known CVEs
Hinet CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2022-35222 | Medium | 6.8 | 2022-08-02 | HiCOS Citizen verification component has a stack-based buffer overflow vulnerability due to insufficient parameter length validation. An unauthenticated physic… |
CVE-2022-32962 | Medium | 6.8 | 2022-07-20 | HiCOS’ client-side citizen certificate component has a double free vulnerability. An unauthenticated physical attacker can exploit this vulnerability to corrup… |
CVE-2022-32961 | Medium | 6.8 | 2022-07-20 | HICOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter len… |
CVE-2022-32960 | Medium | 6.8 | 2022-07-20 | HiCOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter len… |
CVE-2022-32959 | Medium | 6.8 | 2022-07-20 | HiCOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter len… |
CVE-2019-15066 | Critical | 10.0 | 2019-10-17 | An “invalid command” handler issue was discovered in HiNet GPON firmware < I040GWR190731. It allows an attacker to execute arbitrary command through port 6998… |
CVE-2019-15065 | Critical | 9.3 | 2019-10-17 | A service which is hosted on port 6998 in HiNet GPON firmware < I040GWR190731 allows an attacker to execute a specific command to read arbitrary files. CVSS 3… |
CVE-2019-15064 | Critical | 9.8 | 2019-10-17 | HiNet GPON firmware version < I040GWR190731 allows an attacker login to device without any authentication. |
CVE-2019-13412 | Critical | 9.3 | 2019-10-17 | A service which is hosted on port 3097 in HiNet GPON firmware < I040GWR190731 allows an attacker to execute a specific command to read arbitrary files. CVSS 3… |
CVE-2019-13411 | Critical | 10.0 | 2019-10-17 | An “invalid command” handler issue was discovered in HiNet GPON firmware < I040GWR190731. It allows an attacker to execute arbitrary command through port 3097… |