Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: HINET Component: Hicos Natural Person Credential Component Client Clear all filters
TI-2022-15906 CVE-2022-35222 · GHSA-x9w7-3869-cc5q

HiCOS Citizen verification component - Stack Buffer Overflow

Priority LOW 30

HiCOS Citizen verification component has a stack-based buffer overflow vulnerability due to insufficient parameter length validation.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00379 Published 2022-08-02 No fix listed CWE-787
TI-2022-14479 CVE-2022-32961 · GHSA-wj56-2fcc-f3r3

HiCOS’ client-side citizen digital certificate - Stack Buffer Overflow

Priority LOW 30

HICOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter length validation for token information.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00235 Published 2022-07-20 No fix listed CWE-787
TI-2022-14478 CVE-2022-32960 · GHSA-vq84-fxxr-h79m

HiCOS’ client-side citizen digital certificate - Stack Buffer Overflow

Priority LOW 30

HiCOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter length validation for card number.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00235 Published 2022-07-20 No fix listed CWE-787
TI-2022-14477 CVE-2022-32959 · GHSA-c325-hwxm-mw7j

HiCOS’ client-side citizen digital certificate - Stack Buffer Overflow

Priority LOW 30

HiCOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter length validation for OS information.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00235 Published 2022-07-20 No fix listed CWE-787