CVE-2022-47616 Hitron Technologies Inc. CODA-5310 - Remote Command Execution

Hitron CODA-5310 has insufficient filtering for specific parameters in the connection test function. A remote attacker authenticated as an administrator, can use the management page to perform command injection attacks, to execute arbitrary system command, manipulate system or disrupt service...

CVE-2022-47617 Hitron Technologies Inc. CODA-5310 - Hard-coded Cryptographic Key

Hitron CODA-5310 has hard-coded encryption/decryption keys in the program code. A remote attacker authenticated as an administrator can decrypt system files using the hard-coded keys for file access, modification, and cause service disruption...

CVE-2022-47617 Hitron Technologies Inc. CODA-5310 - Hard-coded Cryptographic Key

Hitron CODA-5310 has hard-coded encryption/decryption keys in the program code. A remote attacker authenticated as an administrator can decrypt system files using the hard-coded keys for file access, modification, and cause service disruption...

Hitron Technologies CODA 授权问题漏洞

Hitron Technologies CODA is a wireless router from Hitron Technologies China. An authorization issue vulnerability exists in Hitron Technologies CODA-5310 version 7.2.4.7.1b3, which stems from the Telnet feature using a default account and password. An attacker could use this vulnerability to gai...

CVE-2023-30604 Hitron Technologies Inc. CODA-5310 - Broken Access Control

It is identified a vulnerability of insufficient authentication in the system configuration interface of Hitron Technologies CODA-5310. An unauthorized remote attacker can exploit this vulnerability to access system configuration interface, resulting in performing arbitrary system operation or...

CVE-2022-47617

CVE-2022-47617 affects Hitron CODA-5310, where hard-coded encryption/decryption keys are present in the code. The underlying issue allows a remote attacker, authenticated as an administrator, to decrypt system files using the embedded keys, enabling file access, modification, and potential servic...

CVE-2023-30602: Cleartext Transmission of Sensitive Information

Hitron Technologies CODA-5310’s Telnet function transfers sensitive data in plaintext. An unauthenticated remote attacker can exploit this vulnerability to access credentials of normal users and administrator...

CVE-2023-30604 Hitron Technologies Inc. CODA-5310 - Broken Access Control

It is identified a vulnerability of insufficient authentication in the system configuration interface of Hitron Technologies CODA-5310. An unauthorized remote attacker can exploit this vulnerability to access system configuration interface, resulting in performing arbitrary system operation or...

Hitron Technologies CODA 信任管理问题漏洞

Hitron Technologies CODA is a wireless router from Hitron Technologies China. The Hitron Technologies CODA suffers from a trust management issue vulnerability that arises from a hard-coded encryption or decryption key in program code. A remote attacker could use the hard-coded key to decrypt syst...

CVE-2022-47616

CVE-2022-47616 affects Hitron CODA-5310 routers. The vulnerability arises from insufficient filtering in the connection test function on the administration/management page, allowing an authenticated administrator to perform command injection and execute arbitrary system commands, potentially disr...

Hitron Technologies CODA 操作系统命令注入漏洞

Hitron Technologies CODA-5310 is a wireless router. The Hitron Technologies CODA-5310 suffers from a remote command execution vulnerability that can be exploited by an attacker to perform a command injection attack using the administration page to execute arbitrary system commands, manipulate the...

Hitron Technologies CODA 安全漏洞

Hitron Technologies CODA is a wireless router from Hitron Technologies China. A security vulnerability exists in Hitron Technologies CODA version 7.2.4.7.1b3, which originates from the Telnet function transmitting sensitive data in clear text...

CVE-2023-30603 Hitron Technologies Inc. CODA-5310 - Using default credentials

Hitron Technologies CODA-5310 Telnet function with the default account and password, and there is no warning or prompt to ask users to change the default password and account. An unauthenticated remote attackers can exploit this vulnerability to obtain the administrator’s privilege, resulting in...

CVE-2023-30604: Missing Authentication for Critical Function

It is identified a vulnerability of insufficient authentication in the system configuration interface of Hitron Technologies CODA-5310. An unauthorized remote attacker can exploit this vulnerability to access system configuration interface, resulting in performing arbitrary system operation or...

CVE-2023-30602

The CVE-2023-30602 issue affects Hitron Technologies CODA-5310: the Telnet function transmits credentials in plaintext, allowing an unauthenticated remote attacker to access normal-user and administrator credentials. CVSSv3.1 base score 7.5 (HIGH) with network access and low complexity. Connected...

CVE-2023-30602 Hitron Technologies Inc. CODA-5310 - Insecure service Telnet

Hitron Technologies CODA-5310’s Telnet function transfers sensitive data in plaintext. An unauthenticated remote attacker can exploit this vulnerability to access credentials of normal users and administrator...

CVE-2023-30602 Hitron Technologies Inc. CODA-5310 - Insecure service Telnet

Hitron Technologies CODA-5310’s Telnet function transfers sensitive data in plaintext. An unauthenticated remote attacker can exploit this vulnerability to access credentials of normal users and administrator...

CVE-2023-30603

CVE-2023-30603 affects Hitron Technologies CODA-5310. The vulnerability arises from the Telnet function using a default account and password without prompting users to change credentials. An unauthenticated remote attacker can exploit this to obtain administrator privileges, enabling arbitrary sy...

CVE-2023-30603 Hitron Technologies Inc. CODA-5310 - Using default credentials

Hitron Technologies CODA-5310 Telnet function with the default account and password, and there is no warning or prompt to ask users to change the default password and account. An unauthenticated remote attackers can exploit this vulnerability to obtain the administrator’s privilege, resulting in...

CVE-2023-30603: Use of Default Credentials

Hitron Technologies CODA-5310 Telnet function with the default account and password, and there is no warning or prompt to ask users to change the default password and account. An unauthenticated remote attackers can exploit this vulnerability to obtain the administrator’s privilege, resulting in...