Vulnerabilities

HiCOS Citizen verification component has a stack-based buffer overflow vulnerability due to insufficient parameter length validation.

HiCOS’ client-side citizen certificate component has a double free vulnerability.

HICOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter length validation for token information.

HiCOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter length validation for card number.

HiCOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter length validation for OS information.

A service which is hosted on port 6998 in HiNet GPON firmware < I040GWR190731 allows an attacker to execute a specific command to read arbitrary files.

An “invalid command” handler issue was discovered in HiNet GPON firmware < I040GWR190731.

A service which is hosted on port 3097 in HiNet GPON firmware < I040GWR190731 allows an attacker to execute a specific command to read arbitrary files.

HiNet GPON firmware version < I040GWR190731 allows an attacker login to device without any authentication.

An “invalid command” handler issue was discovered in HiNet GPON firmware < I040GWR190731.