CVE-2019-15066: falha crítica em HiNET GPON
A remote command execution vulnerability was discovered in HiNet GPON firmware < I040GWR190731 port 6998
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 10epss 1.6%
An “invalid command” handler issue was discovered in HiNet GPON firmware < I040GWR190731. It allows an attacker to execute arbitrary command through port 6998. CVSS 3.0 Base score 10.0. CVSS vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
HiNET · GPONCVEs relacionadas — HiNET GPON
No mesmo produto, das mais perigosas para as menos.
CVE-2019-15064—HiNet GPON firmware version < I040GWR190731 allows a user login to device without any authenticationEPSS 1.4%CVE-2019-13411CRITICALA remote command execution vulnerability was discovered in HiNet GPON firmware < I040GWR190731 port 3097EPSS 1.3%CVE-2019-15065CRITICALA vulnerability was discovered in HiNet GPON firmware < I040GWR190731 that allows an attacker to read arbitrary filesEPSS 1.2%CVE-2019-13412CRITICALA vulnerability was discovered in HiNet GPON firmware < I040GWR190731 that allows an attacker to read arbitrary filesEPSS 1.2%