Hinet

10 CVEs across 5 Hinet products. Browse Hinet vulnerabilities, severities, and proof-of-concept exploits.

Hinet products with known CVEs

ProductCVEs
Gpon5
Gpon Firmware5
Hicos Natural Person Credential Component Client5
Hicos’ Client-Side Citizen Digital Certificate4
Hicos Citizen Verification Component - Stack Buffer Overflow1
Hinet CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2022-35222Medium6.82022-08-02HiCOS Citizen verification component has a stack-based buffer overflow vulnerability due to insufficient parameter length validation. An unauthenticated physic…
CVE-2022-32962Medium6.82022-07-20HiCOS’ client-side citizen certificate component has a double free vulnerability. An unauthenticated physical attacker can exploit this vulnerability to corrup…
CVE-2022-32961Medium6.82022-07-20HICOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter len…
CVE-2022-32960Medium6.82022-07-20HiCOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter len…
CVE-2022-32959Medium6.82022-07-20HiCOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter len…
CVE-2019-15066Critical10.02019-10-17An “invalid command” handler issue was discovered in HiNet GPON firmware < I040GWR190731. It allows an attacker to execute arbitrary command through port 6998…
CVE-2019-15065Critical9.32019-10-17A service which is hosted on port 6998 in HiNet GPON firmware < I040GWR190731 allows an attacker to execute a specific command to read arbitrary files. CVSS 3…
CVE-2019-15064Critical9.82019-10-17HiNet GPON firmware version < I040GWR190731 allows an attacker login to device without any authentication.
CVE-2019-13412Critical9.32019-10-17A service which is hosted on port 3097 in HiNet GPON firmware < I040GWR190731 allows an attacker to execute a specific command to read arbitrary files. CVSS 3…
CVE-2019-13411Critical10.02019-10-17An “invalid command” handler issue was discovered in HiNet GPON firmware < I040GWR190731. It allows an attacker to execute arbitrary command through port 3097…