Vulnerabilities

TI-2019-11246 CVE-2019-15065 · GHSA-29g8-w5j3-pph4

A vulnerability was discovered in HiNet GPON firmware < I040GWR190731 that allows an attacker to read arbitrary files

MEDIUM 42

A service which is hosted on port 6998 in HiNet GPON firmware < I040GWR190731 allows an attacker to execute a specific command to read arbitrary files.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.01203 Published 2019-10-17 No fix listed

TI-2019-11247 CVE-2019-15066 · GHSA-gvmh-4rfq-vc35

A remote command execution vulnerability was discovered in HiNet GPON firmware < I040GWR190731 port 6998

MEDIUM 46

An “invalid command” handler issue was discovered in HiNet GPON firmware < I040GWR190731.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01639 Published 2019-10-17 No fix listed

TI-2019-10081 CVE-2019-13412 · GHSA-r7gj-cgmp-cf3x

A vulnerability was discovered in HiNet GPON firmware < I040GWR190731 that allows an attacker to read arbitrary files

MEDIUM 42

A service which is hosted on port 3097 in HiNet GPON firmware < I040GWR190731 allows an attacker to execute a specific command to read arbitrary files.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.01203 Published 2019-10-17 No fix listed

TI-2019-11245 CVE-2019-15064 · GHSA-75x6-v87c-cgm8

HiNet GPON firmware version < I040GWR190731 allows a user login to device without any authentication

MEDIUM 45

HiNet GPON firmware version < I040GWR190731 allows an attacker login to device without any authentication.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01406 Published 2019-10-17 No fix listed CWE-306

TI-2019-10080 CVE-2019-13411 · GHSA-hjvj-cqch-c25r

A remote command execution vulnerability was discovered in HiNet GPON firmware < I040GWR190731 port 3097

MEDIUM 46

An “invalid command” handler issue was discovered in HiNet GPON firmware < I040GWR190731.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01315 Published 2019-10-17 No fix listed

Vulnerabilities

Filters

A vulnerability was discovered in HiNet GPON firmware < I040GWR190731 that allows an attacker to read arbitrary files

A remote command execution vulnerability was discovered in HiNet GPON firmware < I040GWR190731 port 6998

A vulnerability was discovered in HiNet GPON firmware < I040GWR190731 that allows an attacker to read arbitrary files

HiNet GPON firmware version < I040GWR190731 allows a user login to device without any authentication

A remote command execution vulnerability was discovered in HiNet GPON firmware < I040GWR190731 port 3097