PT-2019-13963 · Hinet · Hinet Gpon Firmware

Devcore · Publicado 2019-10-17 · Atualizado 2020-08-24 · CVE-2019-15064

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HiNet GPON firmware version prior to I040GWR190731

Description The issue allows an attacker to log in to the device without any authentication.

Recommendations For versions prior to I040GWR190731, update to a version that includes the necessary security fixes to prevent unauthorized access.

Correção

Missing Authentication

Enumeração de Fraquezas

CWE-306

Identificadores relacionados

CVE-2019-15064

Produtos afetados

Hinet Gpon Firmware

Referências · 4

• https://osv.dev/vulnerability/CVE-2019-15064 · Aviso do Fabricante
• https://tvn.twcert.org.tw/taiwanvn/TVN-201908007 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-15064 · Nota de Segurança
• https://twcert.org.tw/en/cp-128-3015-170fe-2.html · Nota