Hinet Gpon_firmware
5 CVEs affecting Hinet Gpon_firmware. Latest disclosed: 2019-10-17. Critical: 5, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-15066 | Critical | 10.0 | 2019-10-17 | An “invalid command” handler issue was discovered in HiNet GPON firmware < I040GWR190731. It allows an attacker to execute arbitrary command through port 6998… |
CVE-2019-13411 | Critical | 10.0 | 2019-10-17 | An “invalid command” handler issue was discovered in HiNet GPON firmware < I040GWR190731. It allows an attacker to execute arbitrary command through port 3097… |
CVE-2019-15064 | Critical | 9.8 | 2019-10-17 | HiNet GPON firmware version < I040GWR190731 allows an attacker login to device without any authentication. |
CVE-2019-15065 | Critical | 9.3 | 2019-10-17 | A service which is hosted on port 6998 in HiNet GPON firmware < I040GWR190731 allows an attacker to execute a specific command to read arbitrary files. CVSS 3… |
CVE-2019-13412 | Critical | 9.3 | 2019-10-17 | A service which is hosted on port 3097 in HiNet GPON firmware < I040GWR190731 allows an attacker to execute a specific command to read arbitrary files. CVSS 3… |