HINET

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

HINET records in CISA KEV

No HINET vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Gpon Firmware 5 records MEDIUM Hicos Natural Person Credential Component Client 5 records LOW

Records

10 records

TI-2019-11247 CVE-2019-15066 · GHSA-gvmh-4rfq-vc35

A remote command execution vulnerability was discovered in HiNet GPON firmware < I040GWR190731 port 6998

MEDIUM 46

An “invalid command” handler issue was discovered in HiNet GPON firmware < I040GWR190731.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01639 Published 2019-10-17 No fix listed

TI-2019-10080 CVE-2019-13411 · GHSA-hjvj-cqch-c25r

A remote command execution vulnerability was discovered in HiNet GPON firmware < I040GWR190731 port 3097

MEDIUM 46

An “invalid command” handler issue was discovered in HiNet GPON firmware < I040GWR190731.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01315 Published 2019-10-17 No fix listed

TI-2019-11245 CVE-2019-15064 · GHSA-75x6-v87c-cgm8

HiNet GPON firmware version < I040GWR190731 allows a user login to device without any authentication

MEDIUM 45

HiNet GPON firmware version < I040GWR190731 allows an attacker login to device without any authentication.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01406 Published 2019-10-17 No fix listed CWE-306

TI-2019-11246 CVE-2019-15065 · GHSA-29g8-w5j3-pph4

A vulnerability was discovered in HiNet GPON firmware < I040GWR190731 that allows an attacker to read arbitrary files

MEDIUM 42

A service which is hosted on port 6998 in HiNet GPON firmware < I040GWR190731 allows an attacker to execute a specific command to read arbitrary files.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.01203 Published 2019-10-17 No fix listed

TI-2019-10081 CVE-2019-13412 · GHSA-r7gj-cgmp-cf3x

A vulnerability was discovered in HiNet GPON firmware < I040GWR190731 that allows an attacker to read arbitrary files

MEDIUM 42

A service which is hosted on port 3097 in HiNet GPON firmware < I040GWR190731 allows an attacker to execute a specific command to read arbitrary files.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.01203 Published 2019-10-17 No fix listed

TI-2022-15906 CVE-2022-35222 · GHSA-x9w7-3869-cc5q

HiCOS Citizen verification component - Stack Buffer Overflow

LOW 30

HiCOS Citizen verification component has a stack-based buffer overflow vulnerability due to insufficient parameter length validation.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00379 Published 2022-08-02 No fix listed CWE-787

TI-2022-14480 CVE-2022-32962 · GHSA-3pg9-mr9f-v7qm

HiCOS’ client-side citizen digital certificate - Double Free

LOW 30

HiCOS’ client-side citizen certificate component has a double free vulnerability.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.0023 Published 2022-07-20 No fix listed CWE-415

TI-2022-14479 CVE-2022-32961 · GHSA-wj56-2fcc-f3r3

HiCOS’ client-side citizen digital certificate - Stack Buffer Overflow

LOW 30

HICOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter length validation for token information.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00235 Published 2022-07-20 No fix listed CWE-787

TI-2022-14478 CVE-2022-32960 · GHSA-vq84-fxxr-h79m

HiCOS’ client-side citizen digital certificate - Stack Buffer Overflow

LOW 30

HiCOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter length validation for card number.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00235 Published 2022-07-20 No fix listed CWE-787

TI-2022-14477 CVE-2022-32959 · GHSA-c325-hwxm-mw7j

HiCOS’ client-side citizen digital certificate - Stack Buffer Overflow

LOW 30

HiCOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter length validation for OS information.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00235 Published 2022-07-20 No fix listed CWE-787

Open these records in search →

Critical	5
High	0
Medium	5
Low	0
No CVSS	0