CVE-2019-13412
Critical
Description
A service which is hosted on port 3097 in HiNet GPON firmware < I040GWR190731 allows an attacker to execute a specific command to read arbitrary files. CVSS 3.0 Base score 9.3. CVSS vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L).
SeverityCritical
CVSS9.3
Exploit probability—
ProductHinet Gpon Firmware
PublishedOct 17, 2019
First seenOct 17, 2019
How to fix
Update
- hinet gpon_firmwarei040gwr190731 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hinet gpon_firmware | v < i040gwr190731 | i040gwr190731 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.