PT-2019-13324 · Hinet · Hinet Gpon

Devcore · Publicado 2019-10-17 · Atualizado 2021-07-21 · CVE-2019-13412

Positive Technologies (AI Summary)

CVSS v3.1

9.3

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

Name of the Vulnerable Software and Affected Versions HiNet GPON firmware version < I040GWR190731

Description A service hosted on port 3097 allows an attacker to execute a specific command to read arbitrary files.

Recommendations For HiNet GPON firmware version < I040GWR190731, consider restricting access to port 3097 as a temporary workaround until a patch is available.

Correção

Identificadores relacionados

CVE-2019-13412

Produtos afetados

Hinet Gpon

Referências · 4

• https://tvn.twcert.org.tw/taiwanvn/TVN-201908006 · Nota
• https://osv.dev/vulnerability/CVE-2019-13412 · Aviso do Fabricante
• https://twcert.org.tw/en/cp-128-3014-904b1-2.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-13412 · Nota de Segurança