CVE-2022-25017: Improper Neutralization of Special Elements used in an OS Command

Hitron CHITA 7.2.2.0.3b6-CD devices contain a command injection vulnerability via the Device/DDNS ddnsUsername field...

Hitron Technologies CODA-4582U Cross-Site Scripting Vulnerability

Hitron Technologies CODA-4582U is a modem from Hitron Technologies, Taiwan, China. A cross-site scripting vulnerability exists in Hitron CODA-4582U version 7.1.1.30. The vulnerability stems from the lack of proper validation of client data by the WEB application. An attacker can exploit the...

CVE-2020-8824

Hitron CODA-4582U 7.1.1.30 devices allow XSS via a Managed Device name on the Wireless Access Control Add Managed Device screen...

CVE-2020-8824

Hitron CODA-4582U 7.1.1.30 devices allow XSS via a Managed Device name on the Wireless Access Control Add Managed Device screen...

CVE-2020-8824

Hitron CODA-4582U 7.1.1.30 devices allow XSS via a Managed Device name on the Wireless Access Control Add Managed Device screen...

Design/Logic Flaw

Hitron CODA-4582U 7.1.1.30 devices allow XSS via a Managed Device name on the Wireless Access Control Add Managed Device screen...

CVE-2020-8824

CVE-2020-8824 affects Hitron CODA-4582U devices, specifically version 7.1.1.30, where an XSS flaw exists in the Web UI: a crafted name in the Wireless > Access Control > Add Managed Device screen can trigger client-side code execution. Root cause indicated across sources is insufficient val...

CVE-2020-8824

Hitron CODA-4582U 7.1.1.30 devices allow XSS via a Managed Device name on the Wireless Access Control Add Managed Device screen...

PT-2020-20307

Name of the Vulnerable Software and Affected Versions Hitron CODA-4582U version 7.1.1.30 Description The issue allows for XSS via a Managed Device name on the Wireless Access Control Add Managed Device screen. This can be exploited by manipulating the device name to inject malicious scripts...

CVE-2020-8824: Improper Neutralization of Input During Web Page Generation

Hitron CODA-4582U 7.1.1.30 devices allow XSS via a Managed Device name on the Wireless Access Control Add Managed Device screen...

Hitron CVE-30360 Information Disclosure Vulnerability

Hitron CVE-30360 devices is a router device from China Zhongqi Hitron. A security vulnerability exists in the Hitron CVE-30360 devices, which originates from a program sharing the 578A958E3DD933FC DES key used. The vulnerability can be exploited by an attacker to obtain sensitive information by...

Design/Logic Flaw

Hitron CVE-30360 devices use a 578A958E3DD933FC DES key that is shared across different customers' installations, which makes it easier for attackers to obtain sensitive information by decrypting a backup configuration file, as demonstrated by a password hash in the umauthaccountpassword field...

CVE-2014-10069

Hitron CVE-30360 devices use a 578A958E3DD933FC DES key that is shared across different customers' installations, which makes it easier for attackers to obtain sensitive information by decrypting a backup configuration file, as demonstrated by a password hash in the umauthaccountpassword field...

CVE-2014-10069

Hitron CVE-30360 devices use a 578A958E3DD933FC DES key that is shared across different customers' installations, which makes it easier for attackers to obtain sensitive information by decrypting a backup configuration file, as demonstrated by a password hash in the umauthaccountpassword field...

CVE-2014-10069

CVE-2014-10069 (Hitron CVE-30360) affects Hitron CVE-30360 devices. The vulnerability arises from a DES key 578A958E3DD933FC shared across installations, allowing attackers to decrypt a backup configuration file (evidenced by a password hash in um_auth_account_password). CVSS metrics: CVSS2 base ...

CVE-2014-10069: Undefined Security Weakness

Hitron CVE-30360 devices use a 578A958E3DD933FC DES key that is shared across different customers' installations, which makes it easier for attackers to obtain sensitive information by decrypting a backup configuration file, as demonstrated by a password hash in the umauthaccountpassword field...

PT-2018-4158

Name of the Vulnerable Software and Affected Versions Hitron devices affected versions not specified Description The issue allows attackers to obtain sensitive information by decrypting a backup configuration file. This is possible because the devices use a shared DES key, 578A958E3DD933FC, acros...

Hitron CGNV4 Router Command Injection Vulnerability

Hitron CGNV4 is a router product from Hitron. A command injection vulnerability exists in Hitron CGNV4 Router version 4.3.9.9-SIP-UPC. An attacker can exploit the vulnerability to execute arbitrary commands...

Hitron CGNV4 Router Security Bypass Vulnerability

Hitron CGNV4 is a router product from Hitron. A security bypass vulnerability exists in Hitron CGNV4 Router version 4.3.9.9-SIP-UPC, which can be exploited by attackers to obtain sensitive information and perform unauthorized operations...

Hitron CGNV4 Router Cross-Site Request Forgery Vulnerability Vulnerability

Hitron CGNV4 is a router product from Hitron. A cross-site request forgery vulnerability exists in Hitron CGNV4 Router version 4.3.9.9-SIP-UPC. An attacker can exploit the vulnerability to steal cookie-based authentication...