Vulnerability Details CVE-2019-12804
In Hunesion i-oneNet version 3.0.7 ~ 3.0.53 and 4.0.4 ~ 4.0.16, due to the lack of update file integrity checking in the upgrade process, an attacker can craft malicious file and use it as an update.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 27.9%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 4.3
References
Products affected by CVE-2019-12804
-
cpe:2.3:a:hunesion:i-onenet:3.0.53
-
cpe:2.3:a:hunesion:i-onenet:3.0.7
-
cpe:2.3:a:hunesion:i-onenet:4.0.16
-
cpe:2.3:a:hunesion:i-onenet:4.0.4