CVE-2019-15064

HiNet GPON firmware version < I040GWR190731 allows a user login to device without any authentication

published October 17, 2019

CVSS
—
EPSS
1%
Percentile
72.4
In the wild
Unconfirmed
What it is

🚨 No password? No problem! An unauthenticated login vulnerability in HiNet GPON firmware lets attackers waltz right into devices without breaking a sweat. 🔥 Think of it as a hotel where anyone can walk in and access any room without checking in — no keycards or ID required! That's how easily this vulnerability can be exploited. An attacker could take complete control of the device, change settings, or even intercept your private data. It's like leaving the front door wide open while your valuables are on display; it’s absolutely devastating!

Put simply

Think of it as a hotel where anyone can walk in and access any room without checking in — no keycards or ID required! That's how easily this vulnerability can be exploited. This vulnerability allows an attacker to log into the HiNet GPON firmware without any authentication, which means no credentials are needed, making it alarmingly easy to access sensitive device functions.

What to do

An attacker could take complete control of the device, change settings, or even intercept your private data. It's like leaving the front door wide open while your valuables are on display; it’s absolutely devastating! Make sure to upgrade the firmware to the latest version available from HiNet. Regularly check for updates and consider changing default login credentials if still in use. Don’t wait — lock down those devices! You've got this! Just follow these steps and you'll have your network secured in no time. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01406 · 72.4th percentile
Published
2019-10-17T19:19Z
EPSS history
Timeline
  • 17 OCT 19:19Z
    HiNet GPON firmware version < I040GWR190731 allows a user login to device without any authentication
    cvelistv5