CVE-2019-15065: falha crítica em HiNET GPON
A vulnerability was discovered in HiNet GPON firmware < I040GWR190731 that allows an attacker to read arbitrary files
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.3epss 1.2%
A service which is hosted on port 6998 in HiNet GPON firmware < I040GWR190731 allows an attacker to execute a specific command to read arbitrary files. CVSS 3.0 Base score 9.3. CVSS vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L).
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
Produtos afetados
HiNET · GPONCVEs relacionadas — HiNET GPON
No mesmo produto, das mais perigosas para as menos.
CVE-2019-15066CRITICALA remote command execution vulnerability was discovered in HiNet GPON firmware < I040GWR190731 port 6998EPSS 1.6%CVE-2019-15064—HiNet GPON firmware version < I040GWR190731 allows a user login to device without any authenticationEPSS 1.4%CVE-2019-13411CRITICALA remote command execution vulnerability was discovered in HiNet GPON firmware < I040GWR190731 port 3097EPSS 1.3%CVE-2019-13412CRITICALA vulnerability was discovered in HiNet GPON firmware < I040GWR190731 that allows an attacker to read arbitrary filesEPSS 1.2%