CVE-2023-30604

CVE-2023-30604 affects Hitron Technologies CODA-5310. The vulnerability is described as insufficient authentication in the system configuration interface, allowing an unauthorized remote attacker to access the interface and perform arbitrary system operations or disrupt service. The primary techn...

CVE-2022-47616: Improper Neutralization of Special Elements used in an OS Command

Hitron CODA-5310 has insufficient filtering for specific parameters in the connection test function. A remote attacker authenticated as an administrator, can use the management page to perform command injection attacks, to execute arbitrary system command, manipulate system or disrupt service...

Hitron Technologies CODA 访问控制错误漏洞

Hitron Technologies CODA is a wireless router from Hitron Technologies China. An access control error vulnerability exists in Hitron Technologies CODA version 7.2.4.7.1b3, which stems from an insufficient authentication issue in the system configuration interface. An attacker could exploit this...

CVE-2022-47617: Use of Hard-coded Credentials

Hitron CODA-5310 has hard-coded encryption/decryption keys in the program code. A remote attacker authenticated as an administrator can decrypt system files using the hard-coded keys for file access, modification, and cause service disruption...

CVE-2023-30603

Hitron Technologies CODA-5310 Telnet function with the default account and password, and there is no warning or prompt to ask users to change the default password and account. An unauthenticated remote attackers can exploit this vulnerability to obtain the administrator’s privilege, resulting in...

CVE-2022-47617

Hitron CODA-5310 has hard-coded encryption/decryption keys in the program code. A remote attacker authenticated as an administrator can decrypt system files using the hard-coded keys for file access, modification, and cause service disruption...

CVE-2022-47616

Hitron CODA-5310 has insufficient filtering for specific parameters in the connection test function. A remote attacker authenticated as an administrator, can use the management page to perform command injection attacks, to execute arbitrary system command, manipulate system or disrupt service...

CVE-2023-30602

Hitron Technologies CODA-5310’s Telnet function transfers sensitive data in plaintext. An unauthenticated remote attacker can exploit this vulnerability to access credentials of normal users and administrator...

PT-2023-3553 · Hitron Technologies · Coda-5310

Name of the Vulnerable Software and Affected Versions: Hitron Technologies CODA-5310 affected versions not specified Description: The issue is related to the Telnet function in the Hitron Technologies CODA-5310, which uses a default account and password without prompting users to change them. Thi...

PT-2023-3107 · Hitron · Hitron Coda-5310

Name of the Vulnerable Software and Affected Versions: Hitron CODA-5310 affected versions not specified Description: The issue exists due to insufficient measures to neutralize special elements used in the operating system command. A remote attacker, authenticated as an administrator, can exploit...

PT-2023-3548 · Hitron Technologies · Coda-5310

Name of the Vulnerable Software and Affected Versions: Hitron Technologies CODA-5310 affected versions not specified Description: The issue concerns the Telnet function of the Hitron Technologies CODA-5310, which transfers sensitive data in plaintext. This allows an unauthenticated remote attacke...

Hitron CHITA Command Injection (CVE-2022-25017)

A command injection vulnerability exists in Hitron CHITA. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2022-25017

Hitron CHITA 7.2.2.0.3b6-CD devices contain a command injection vulnerability via the Device/DDNS ddnsUsername field...

CVE-2022-25017

Hitron CHITA 7.2.2.0.3b6-CD devices contain a command injection vulnerability via the Device/DDNS ddnsUsername field...

CVE-2022-25017

Hitron CHITA 7.2.2.0.3b6-CD devices contain a command injection vulnerability via the Device/DDNS ddnsUsername field...

Command injection

Hitron CHITA 7.2.2.0.3b6-CD devices contain a command injection vulnerability via the Device/DDNS ddnsUsername field...

CVE-2022-25017

CVE-2022-25017 affects Hitron CHITA router firmware 7.2.2.0.3b6-CD, with a command-injection vulnerability in the Device/DDNS ddnsUsername field. According to connected sources (CPAI advisory and Red Hat/NVD references), this enables remote code execution via network access, with low privileges r...

CVE-2022-25017

Hitron CHITA 7.2.2.0.3b6-CD devices contain a command injection vulnerability via the Device/DDNS ddnsUsername field...

Hitron Technologies CHITA Router Firmware 操作系统命令注入漏洞

Hitron Technologies CHITA Router Firmware is a router firmware from Hitron Technologies of China. A security vulnerability exists in the Hitron CHITA 7.2.2.0.3b6-CD firmware version that originates from a command injection in the Device/DDNS ddnsUsername field...

CVE-2022-25017: Improper Neutralization of Special Elements used in an OS Command

Hitron CHITA 7.2.2.0.3b6-CD devices contain a command injection vulnerability via the Device/DDNS ddnsUsername field...