Approved changes feed: RSS · Atom

cpe:2.3:a:hinet:gpon:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHinet (05875a8c-114c-5fd4-959c-9c195c74bf2a)
ProductGpon (e092088a-6a2f-5cb5-b258-44697eb90ce5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-15066 vulnerable 2026-06-08 05:12:56.612758 A remote command execution vulnerability was discovered in HiNet GPON firmware < I040GWR190731 port 6998
CRITICAL (10)
An “invalid command” handler issue was discovered in HiNet GPON firmware < I040GWR190731. It allows an attacker to execute arbitrary command through port 6998. CVSS 3.0 Base score 10.0. CVSS vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).
Published: 2019-10-17T19:22:14.824Z
Updated: 2024-09-16T16:48:07.146Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15065 vulnerable 2026-06-08 05:12:56.612112 A vulnerability was discovered in HiNet GPON firmware < I040GWR190731 that allows an attacker to read arbitrary files
CRITICAL (9.3)
A service which is hosted on port 6998 in HiNet GPON firmware < I040GWR190731 allows an attacker to execute a specific command to read arbitrary files. CVSS 3.0 Base score 9.3. CVSS vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L).
Published: 2019-10-17T19:23:13.111Z
Updated: 2024-09-16T23:31:24.179Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15064 vulnerable 2026-06-08 05:12:56.610611 HiNet GPON firmware version < I040GWR190731 allows a user login to device without any authentication
HiNet GPON firmware version < I040GWR190731 allows an attacker login to device without any authentication.
Published: 2019-10-17T19:19:53.093Z
Updated: 2024-09-16T19:01:42.697Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13412 vulnerable 2026-06-08 05:12:42.228934 A vulnerability was discovered in HiNet GPON firmware < I040GWR190731 that allows an attacker to read arbitrary files
CRITICAL (9.3)
A service which is hosted on port 3097 in HiNet GPON firmware < I040GWR190731 allows an attacker to execute a specific command to read arbitrary files. CVSS 3.0 Base score 9.3. CVSS vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L).
Published: 2019-10-17T19:21:13.687Z
Updated: 2024-09-16T21:02:20.317Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13411 vulnerable 2026-06-08 05:12:42.226926 A remote command execution vulnerability was discovered in HiNet GPON firmware < I040GWR190731 port 3097
CRITICAL (10)
An “invalid command” handler issue was discovered in HiNet GPON firmware < I040GWR190731. It allows an attacker to execute arbitrary command through port 3097. CVSS 3.0 Base score 10.0. CVSS vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).
Published: 2019-10-17T17:42:23.854Z
Updated: 2024-09-16T23:27:00.636Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.