CVE-2019-15065

CVE-2019-15065 describes a critical arbitrary file read vulnerability affecting HiNet GPON firmware versions prior to I040GWR190731. An unauthenticated attacker can exploit a service on port 6998 to read arbitrary files on the device. This vulnerability carries a CVSSv3.1 base score of 7.5 (High), indicating a network-exploitable flaw with low attack complexity and high confidentiality impact. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, suggesting awareness and potential for future exploitation.