CVE-2022-47616

Hitron CODA-5310 has insufficient filtering for specific parameters in the connection test function. A remote attacker authenticated as an administrator, can use the management page to perform command injection attacks, to execute arbitrary system command, manipulate system or disrupt service...

Hardcoded credentials

Hitron CODA-5310 has hard-coded encryption/decryption keys in the program code. A remote attacker authenticated as an administrator can decrypt system files using the hard-coded keys for file access, modification, and cause service disruption...

Command injection

Hitron CODA-5310 has insufficient filtering for specific parameters in the connection test function. A remote attacker authenticated as an administrator, can use the management page to perform command injection attacks, to execute arbitrary system command, manipulate system or disrupt service...

Design/Logic Flaw

Hitron Technologies CODA-5310’s Telnet function transfers sensitive data in plaintext. An unauthenticated remote attacker can exploit this vulnerability to access credentials of normal users and administrator...

Default credentials

Hitron Technologies CODA-5310 Telnet function with the default account and password, and there is no warning or prompt to ask users to change the default password and account. An unauthenticated remote attackers can exploit this vulnerability to obtain the administrator’s privilege, resulting in...

CVE-2022-47616 Hitron Technologies Inc. CODA-5310 - Remote Command Execution

Hitron CODA-5310 has insufficient filtering for specific parameters in the connection test function. A remote attacker authenticated as an administrator, can use the management page to perform command injection attacks, to execute arbitrary system command, manipulate system or disrupt service...

Hitron Technologies CODA 访问控制错误漏洞

Hitron Technologies CODA is a wireless router from Hitron Technologies China. An access control error vulnerability exists in Hitron Technologies CODA version 7.2.4.7.1b3, which stems from an insufficient authentication issue in the system configuration interface. An attacker could exploit this...

CVE-2022-47616 Hitron Technologies Inc. CODA-5310 - Remote Command Execution

Hitron CODA-5310 has insufficient filtering for specific parameters in the connection test function. A remote attacker authenticated as an administrator, can use the management page to perform command injection attacks, to execute arbitrary system command, manipulate system or disrupt service...

CVE-2022-47617 Hitron Technologies Inc. CODA-5310 - Hard-coded Cryptographic Key

Hitron CODA-5310 has hard-coded encryption/decryption keys in the program code. A remote attacker authenticated as an administrator can decrypt system files using the hard-coded keys for file access, modification, and cause service disruption...

CVE-2023-30603 Hitron Technologies Inc. CODA-5310 - Using default credentials

Hitron Technologies CODA-5310 Telnet function with the default account and password, and there is no warning or prompt to ask users to change the default password and account. An unauthenticated remote attackers can exploit this vulnerability to obtain the administrator’s privilege, resulting in...

CVE-2023-30603 Hitron Technologies Inc. CODA-5310 - Using default credentials

Hitron Technologies CODA-5310 Telnet function with the default account and password, and there is no warning or prompt to ask users to change the default password and account. An unauthenticated remote attackers can exploit this vulnerability to obtain the administrator’s privilege, resulting in...

Hitron Technologies CODA 安全漏洞

Hitron Technologies CODA is a wireless router from Hitron Technologies China. A security vulnerability exists in Hitron Technologies CODA version 7.2.4.7.1b3, which originates from the Telnet function transmitting sensitive data in clear text...

CVE-2023-30602 Hitron Technologies Inc. CODA-5310 - Insecure service Telnet

Hitron Technologies CODA-5310’s Telnet function transfers sensitive data in plaintext. An unauthenticated remote attacker can exploit this vulnerability to access credentials of normal users and administrator...

CVE-2023-30602

The CVE-2023-30602 issue affects Hitron Technologies CODA-5310: the Telnet function transmits credentials in plaintext, allowing an unauthenticated remote attacker to access normal-user and administrator credentials. CVSSv3.1 base score 7.5 (HIGH) with network access and low complexity. Connected...

CVE-2022-47616

CVE-2022-47616 affects Hitron CODA-5310 routers. The vulnerability arises from insufficient filtering in the connection test function on the administration/management page, allowing an authenticated administrator to perform command injection and execute arbitrary system commands, potentially disr...

Hitron Technologies CODA 操作系统命令注入漏洞

Hitron Technologies CODA-5310 is a wireless router. The Hitron Technologies CODA-5310 suffers from a remote command execution vulnerability that can be exploited by an attacker to perform a command injection attack using the administration page to execute arbitrary system commands, manipulate the...

CVE-2022-47617

CVE-2022-47617 affects Hitron CODA-5310, where hard-coded encryption/decryption keys are present in the code. The underlying issue allows a remote attacker, authenticated as an administrator, to decrypt system files using the embedded keys, enabling file access, modification, and potential servic...

CVE-2022-47617 Hitron Technologies Inc. CODA-5310 - Hard-coded Cryptographic Key

Hitron CODA-5310 has hard-coded encryption/decryption keys in the program code. A remote attacker authenticated as an administrator can decrypt system files using the hard-coded keys for file access, modification, and cause service disruption...

CVE-2023-30602 Hitron Technologies Inc. CODA-5310 - Insecure service Telnet

Hitron Technologies CODA-5310’s Telnet function transfers sensitive data in plaintext. An unauthenticated remote attacker can exploit this vulnerability to access credentials of normal users and administrator...

CVE-2023-30604 Hitron Technologies Inc. CODA-5310 - Broken Access Control

It is identified a vulnerability of insufficient authentication in the system configuration interface of Hitron Technologies CODA-5310. An unauthorized remote attacker can exploit this vulnerability to access system configuration interface, resulting in performing arbitrary system operation or...