PT-2019-13963 · Hinet · Hinet Gpon Firmware

Devcore · Published 2019-10-17 · Updated 2020-08-24 · CVE-2019-15064

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HiNet GPON firmware version prior to I040GWR190731

Description The issue allows an attacker to log in to the device without any authentication.

Recommendations For versions prior to I040GWR190731, update to a version that includes the necessary security fixes to prevent unauthorized access.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2019-15064

Affected Products

Hinet Gpon Firmware

References · 4

• https://osv.dev/vulnerability/CVE-2019-15064 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-15064 · Security Note
• https://tvn.twcert.org.tw/taiwanvn/TVN-201908007 · Note
• https://twcert.org.tw/en/cp-128-3015-170fe-2.html · Note