Approved changes feed: RSS · Atom

cpe:2.3:a:hunesion:i-onenet:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHunesion (d333ea69-3611-5069-8800-798e3d1c9e58)
ProductI Onenet (bbbd1ebc-3016-5e7f-80e6-b722026bba27)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-12804 vulnerable 2026-06-08 05:12:40.506003 Hunesion i-oneNet Missing Support for Integrity Check vulnerability
HIGH (7.8)
In Hunesion i-oneNet version 3.0.7 ~ 3.0.53 and 4.0.4 ~ 4.0.16, due to the lack of update file integrity checking in the upgrade process, an attacker can craft malicious file and use it as an update.
Published: 2019-07-10T19:38:09.000Z
Updated: 2024-08-04T23:32:55.511Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-12803 vulnerable 2026-06-08 05:12:40.505582 Hunesion i-oneNet unrestricted file upload vulnerability
HIGH (8.8)
In Hunesion i-oneNet version 3.0.7 ~ 3.0.53 and 4.0.4 ~ 4.0.16, the specific upload web module doesn't verify the file extension and type, and an attacker can upload a webshell. After the webshell upload, an attacker can use the webshell to perform remote code exection such as running a system command.
Published: 2019-07-10T19:34:27.000Z
Updated: 2024-08-04T23:32:55.314Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.