What’s Vulnerable › Vulnerabilities

CVE-2019-15064: HiNet GPON firmware version < I040GWR190731 allows a user login to device without any authentication

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-10-17 · updated 2026-06-17
• Weakness: CWE-306

Description

HiNet GPON firmware version < I040GWR190731 allows an attacker login to device without any authentication.

Affected products

• HiNET GPON: before i040gwr190731 — fixed in i040gwr190731

How to fix

Upgrade to a fixed version: HiNET GPON i040gwr190731. Check the vendor advisory for mitigations.

References

• https://tvn.twcert.org.tw/taiwanvn/TVN-201908007
• https://www.twcert.org.tw/en/cp-128-3015-170fe-2.html
• https://tvn.twcert.org.tw/taiwanvn/TVN-201908007
• https://www.twcert.org.tw/en/cp-128-3015-170fe-2.html

Get alerted when CVE-2019-15064 or the next vulnerability affects your stack