Vulnerability Description
A service which is hosted on port 6998 in HiNet GPON firmware < I040GWR190731 allows an attacker to execute a specific command to read arbitrary files. CVSS 3.0 Base score 9.3. CVSS vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L).
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Hinet | Gpon Firmware | < i040gwr190731 |
| Hinet | Gpon | - |
References
- https://tvn.twcert.org.tw/taiwanvn/TVN-201908011Third Party Advisory
- https://www.twcert.org.tw/en/cp-128-3016-b0e90-2.htmlThird Party Advisory
- https://tvn.twcert.org.tw/taiwanvn/TVN-201908011Third Party Advisory
- https://www.twcert.org.tw/en/cp-128-3016-b0e90-2.htmlThird Party Advisory
FAQ
What is CVE-2019-15065?
CVE-2019-15065 is a vulnerability with a CVSS score of 9.3 (CRITICAL). A service which is hosted on port 6998 in HiNet GPON firmware < I040GWR190731 allows an attacker to execute a specific command to read arbitrary files. CVSS 3.0 Base score 9.3. CVSS vector: (CVSS:3.0/...
How severe is CVE-2019-15065?
CVE-2019-15065 has been rated CRITICAL with a CVSS base score of 9.3/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2019-15065?
Check the references section above for vendor advisories and patch information. Affected products include: Hinet Gpon Firmware, Hinet Gpon.