HINET records

10 published records for vendor hinet.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 2
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

10 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2019-15066No exploit	A remote command execution vulnerability was discovered in HiNet GPON firmware < I040GWR190731 port 6998hinet · gpon firmware pre-auth RCE	Critical9.8	—	1.6%	Oct 17, 2019
39Monitor	CVE-2019-15064No exploit	HiNet GPON firmware version < I040GWR190731 allows a user login to device without any authenticationhinet · gpon firmware · CWE-306 Pre-auth Auth bypass	Critical9.8	—	1.4%	Oct 17, 2019
39Monitor	CVE-2019-13411No exploit	A remote command execution vulnerability was discovered in HiNet GPON firmware < I040GWR190731 port 3097hinet · gpon firmware pre-auth RCE	Critical9.8	—	1.3%	Oct 17, 2019
30Monitor	CVE-2019-13412No exploit	A vulnerability was discovered in HiNet GPON firmware < I040GWR190731 that allows an attacker to read arbitrary fileshinet · gpon firmware Pre-auth	High7.5	—	1.2%	Oct 17, 2019
30Monitor	CVE-2019-15065No exploit	A vulnerability was discovered in HiNet GPON firmware < I040GWR190731 that allows an attacker to read arbitrary fileshinet · gpon firmware Pre-auth	High7.5	—	1.2%	Oct 17, 2019
27Monitor	CVE-2022-35222No exploit	HiCOS Citizen verification component - Stack Buffer Overflowhinet · hicos natural person credential component client · CWE-787 RCE Memory safety	Medium6.8	—	0.3%	Aug 2, 2022
27Monitor	CVE-2022-32960No exploit	HiCOS’ client-side citizen digital certificate - Stack Buffer Overflowhinet · hicos natural person credential component client · CWE-787 RCE Memory safety	Medium6.8	—	0.2%	Jul 19, 2022
27Monitor	CVE-2022-32961No exploit	HiCOS’ client-side citizen digital certificate - Stack Buffer Overflowhinet · hicos natural person credential component client · CWE-787 RCE Memory safety	Medium6.8	—	0.2%	Jul 19, 2022
27Monitor	CVE-2022-32959No exploit	HiCOS’ client-side citizen digital certificate - Stack Buffer Overflowhinet · hicos natural person credential component client · CWE-787 RCE Memory safety	Medium6.8	—	0.2%	Jul 19, 2022
27Monitor	CVE-2022-32962No exploit	HiCOS’ client-side citizen digital certificate - Double Freehinet · hicos natural person credential component client · CWE-415 RCE Memory safety	Medium6.8	—	0.2%	Jul 19, 2022

CVE-2019-15066
39Monitor
A remote command execution vulnerability was discovered in HiNet GPON firmware < I040GWR190731 port 6998
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
hinet · gpon firmwareOct 17, 2019
CVE-2019-15064
39Monitor
HiNet GPON firmware version < I040GWR190731 allows a user login to device without any authentication
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Auth bypass
hinet · gpon firmwareOct 17, 2019
CVE-2019-13411
39Monitor
A remote command execution vulnerability was discovered in HiNet GPON firmware < I040GWR190731 port 3097
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
hinet · gpon firmwareOct 17, 2019
CVE-2019-13412
30Monitor
A vulnerability was discovered in HiNet GPON firmware < I040GWR190731 that allows an attacker to read arbitrary files
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
hinet · gpon firmwareOct 17, 2019
CVE-2019-15065
30Monitor
A vulnerability was discovered in HiNet GPON firmware < I040GWR190731 that allows an attacker to read arbitrary files
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
hinet · gpon firmwareOct 17, 2019
CVE-2022-35222
27Monitor
HiCOS Citizen verification component - Stack Buffer Overflow
MediumCVSS 6.8No exploitEPSS 0%
- RCE
- Memory safety
hinet · hicos natural person credential component clientAug 2, 2022
CVE-2022-32960
27Monitor
HiCOS’ client-side citizen digital certificate - Stack Buffer Overflow
MediumCVSS 6.8No exploitEPSS 0%
- RCE
- Memory safety
hinet · hicos natural person credential component clientJul 19, 2022
CVE-2022-32961
27Monitor
HiCOS’ client-side citizen digital certificate - Stack Buffer Overflow
MediumCVSS 6.8No exploitEPSS 0%
- RCE
- Memory safety
hinet · hicos natural person credential component clientJul 19, 2022
CVE-2022-32959
27Monitor
HiCOS’ client-side citizen digital certificate - Stack Buffer Overflow
MediumCVSS 6.8No exploitEPSS 0%
- RCE
- Memory safety
hinet · hicos natural person credential component clientJul 19, 2022
CVE-2022-32962
27Monitor
HiCOS’ client-side citizen digital certificate - Double Free
MediumCVSS 6.8No exploitEPSS 0%
- RCE
- Memory safety
hinet · hicos natural person credential component clientJul 19, 2022