← Back to browse · API

CVE-2019-13411

Severity
CRITICAL
CVSS
10.0
EPSS
0.01315
Risk score
40.46
CISA KEV
No
PoC
No
Published
2019-10-17
Modified
2024-09-16
First seen
2026-08-07
Aliases
EUVD-2019-4905, GHSA-HJVJ-CQCH-C25R
Products
HiNET:GPON firmware before I040GWR190731
Sources
euvd EUVD-2019-4905

Description

An “invalid command” handler issue was discovered in HiNet GPON firmware < I040GWR190731. It allows an attacker to execute arbitrary command through port 3097. CVSS 3.0 Base score 10.0. CVSS vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).

References