PT-2019-13964 · Hinet · Hinet Gpon

Devcore · Published 2019-10-17 · Updated 2021-07-21 · CVE-2019-15065

Positive Technologies (AI Summary)

CVSS v3.1

9.3

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

Name of the Vulnerable Software and Affected Versions HiNet GPON firmware version < I040GWR190731

Description A service hosted on port 6998 allows an attacker to execute a specific command to read arbitrary files.

Recommendations For HiNet GPON firmware version < I040GWR190731, consider restricting access to port 6998 as a temporary workaround until a patch is available.

Fix

Related Identifiers

CVE-2019-15065

Affected Products

Hinet Gpon

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-15065 · Security Note
• https://osv.dev/vulnerability/CVE-2019-15065 · Vendor Advisory
• https://tvn.twcert.org.tw/taiwanvn/TVN-201908011 · Note
• https://twcert.org.tw/en/cp-128-3016-b0e90-2.html · Note