219 matches found
Hitron Technologies CODA 授权问题漏洞
Hitron Technologies CODA is a wireless router from Hitron Technologies China. An authorization issue vulnerability exists in Hitron Technologies CODA-5310 version 7.2.4.7.1b3, which stems from the Telnet feature using a default account and password. An attacker could use this vulnerability to gai...
CVE-2023-30604
CVE-2023-30604 affects Hitron Technologies CODA-5310. The vulnerability is described as insufficient authentication in the system configuration interface, allowing an unauthorized remote attacker to access the interface and perform arbitrary system operations or disrupt service. The primary techn...
CVE-2023-30603
CVE-2023-30603 affects Hitron Technologies CODA-5310. The vulnerability arises from the Telnet function using a default account and password without prompting users to change credentials. An unauthenticated remote attacker can exploit this to obtain administrator privileges, enabling arbitrary sy...
Hitron Technologies CODA 信任管理问题漏洞
Hitron Technologies CODA is a wireless router from Hitron Technologies China. The Hitron Technologies CODA suffers from a trust management issue vulnerability that arises from a hard-coded encryption or decryption key in program code. A remote attacker could use the hard-coded key to decrypt syst...
PT-2023-15438 · Hitron · Hitron Coda-5310
Name of the Vulnerable Software and Affected Versions: Hitron CODA-5310 affected versions not specified Description: The issue concerns hard-coded encryption/decryption keys in the program code, allowing a remote attacker authenticated as an administrator to decrypt system files. This access...
CVE-2023-30604 Hitron Technologies Inc. CODA-5310 - Broken Access Control
It is identified a vulnerability of insufficient authentication in the system configuration interface of Hitron Technologies CODA-5310. An unauthorized remote attacker can exploit this vulnerability to access system configuration interface, resulting in performing arbitrary system operation or...
CVE-2023-30603
Hitron Technologies CODA-5310 Telnet function with the default account and password, and there is no warning or prompt to ask users to change the default password and account. An unauthenticated remote attackers can exploit this vulnerability to obtain the administrator’s privilege, resulting in...
CVE-2022-47617
Hitron CODA-5310 has hard-coded encryption/decryption keys in the program code. A remote attacker authenticated as an administrator can decrypt system files using the hard-coded keys for file access, modification, and cause service disruption...
CVE-2022-47616
Hitron CODA-5310 has insufficient filtering for specific parameters in the connection test function. A remote attacker authenticated as an administrator, can use the management page to perform command injection attacks, to execute arbitrary system command, manipulate system or disrupt service...
CVE-2023-30602
Hitron Technologies CODA-5310’s Telnet function transfers sensitive data in plaintext. An unauthenticated remote attacker can exploit this vulnerability to access credentials of normal users and administrator...
PT-2023-3107 · Hitron · Hitron Coda-5310
Name of the Vulnerable Software and Affected Versions: Hitron CODA-5310 affected versions not specified Description: The issue exists due to insufficient measures to neutralize special elements used in the operating system command. A remote attacker, authenticated as an administrator, can exploit...
PT-2023-3553 · Hitron Technologies · Coda-5310
Name of the Vulnerable Software and Affected Versions: Hitron Technologies CODA-5310 affected versions not specified Description: The issue is related to the Telnet function in the Hitron Technologies CODA-5310, which uses a default account and password without prompting users to change them. Thi...
PT-2023-3548 · Hitron Technologies · Coda-5310
Name of the Vulnerable Software and Affected Versions: Hitron Technologies CODA-5310 affected versions not specified Description: The issue concerns the Telnet function of the Hitron Technologies CODA-5310, which transfers sensitive data in plaintext. This allows an unauthenticated remote attacke...
Hitron CHITA Command Injection (CVE-2022-25017)
A command injection vulnerability exists in Hitron CHITA. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
CVE-2022-25017
Hitron CHITA 7.2.2.0.3b6-CD devices contain a command injection vulnerability via the Device/DDNS ddnsUsername field...
CVE-2022-25017
Hitron CHITA 7.2.2.0.3b6-CD devices contain a command injection vulnerability via the Device/DDNS ddnsUsername field...
CVE-2022-25017
Hitron CHITA 7.2.2.0.3b6-CD devices contain a command injection vulnerability via the Device/DDNS ddnsUsername field...
Command injection
Hitron CHITA 7.2.2.0.3b6-CD devices contain a command injection vulnerability via the Device/DDNS ddnsUsername field...
CVE-2022-25017
CVE-2022-25017 affects Hitron CHITA router firmware 7.2.2.0.3b6-CD, with a command-injection vulnerability in the Device/DDNS ddnsUsername field. According to connected sources (CPAI advisory and Red Hat/NVD references), this enables remote code execution via network access, with low privileges r...