Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 10

Export CSV
CVE-2022-35222

HiCOS Citizen verification component - Stack Buffer Overflow

HiCOS Citizen verification component has a stack-based buffer overflow vulnerability due to insufficient parameter length validation. An unauthenticated physical attacker can exploit this vulnerability to execute arbitrary code, manipulate system command or disrupt service.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Hinet
Products
Hicos Natural Person Credential Component Client
CVE-2022-32962

HiCOS’ client-side citizen digital certificate - Double Free

HiCOS’ client-side citizen certificate component has a double free vulnerability. An unauthenticated physical attacker can exploit this vulnerability to corrupt memory and execute arbitrary code, manipulate system data or terminate service.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Hinet
Products
Hicos Natural Person Credential Component Client
CVE-2022-32961

HiCOS’ client-side citizen digital certificate - Stack Buffer Overflow

HICOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter length validation for token information. An unauthenticated physical attacker can exploit this vulnerability to execute arbitrary code, manipulate system data or terminate service.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Hinet
Products
Hicos Natural Person Credential Component Client
CVE-2022-32960

HiCOS’ client-side citizen digital certificate - Stack Buffer Overflow

HiCOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter length validation for card number. An unauthenticated physical attacker can exploit this vulnerability to execute arbitrary code, manipulate system data or terminate service.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Hinet
Products
Hicos Natural Person Credential Component Client
CVE-2022-32959

HiCOS’ client-side citizen digital certificate - Stack Buffer Overflow

HiCOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter length validation for OS information. An unauthenticated physical attacker can exploit this vulnerability to execute arbitrary code, manipulate system data or terminate service.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Hinet
Products
Hicos Natural Person Credential Component Client
CVE-2019-15066

A remote command execution vulnerability was discovered in HiNet GPON firmware < I040GWR190731 port 6998

An “invalid command” handler issue was discovered in HiNet GPON firmware < I040GWR190731. It allows an attacker to execute arbitrary command through port 6998. CVSS 3.0 Base score 10.0. CVSS vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).

CVSS 3.1 · 10 Critical EPSS 1.6% KEV · Not listed
Vendors
Hinet
Products
Gpon Gpon Firmware
CVE-2019-15065

A vulnerability was discovered in HiNet GPON firmware < I040GWR190731 that allows an attacker to read arbitrary files

A service which is hosted on port 6998 in HiNet GPON firmware < I040GWR190731 allows an attacker to execute a specific command to read arbitrary files. CVSS 3.0 Base score 9.3. CVSS vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L).

CVSS 3.1 · 9.3 Critical EPSS 1.2% KEV · Not listed
Vendors
Hinet
Products
Gpon Gpon Firmware
CVE-2019-15064

HiNet GPON firmware version < I040GWR190731 allows a user login to device without any authentication

HiNet GPON firmware version < I040GWR190731 allows an attacker login to device without any authentication.

CVSS 3.1 · 9.8 Critical EPSS 1.4% KEV · Not listed
Vendors
Hinet
Products
Gpon Gpon Firmware
CVE-2019-13412

A vulnerability was discovered in HiNet GPON firmware < I040GWR190731 that allows an attacker to read arbitrary files

A service which is hosted on port 3097 in HiNet GPON firmware < I040GWR190731 allows an attacker to execute a specific command to read arbitrary files. CVSS 3.0 Base score 9.3. CVSS vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L).

CVSS 3.1 · 9.3 Critical EPSS 1.2% KEV · Not listed
Vendors
Hinet
Products
Gpon Gpon Firmware
CVE-2019-13411

A remote command execution vulnerability was discovered in HiNet GPON firmware < I040GWR190731 port 3097

An “invalid command” handler issue was discovered in HiNet GPON firmware < I040GWR190731. It allows an attacker to execute arbitrary command through port 3097. CVSS 3.0 Base score 10.0. CVSS vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).

CVSS 3.1 · 10 Critical EPSS 1.3% KEV · Not listed
Vendors
Hinet
Products
Gpon Gpon Firmware