Vendors / Hitron Technologies Inc. Records 11 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 4
CVSS high 4
Exploited now Hitron Technologies Inc. records in CISA KEV No Hitron Technologies Inc. vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 62
Hitron CHITA 7.2.2.0.3b6-CD devices contain a command injection vulnerability via the Device/DDNS ddnsUsername field.
CVSS 3.1 CRITICAL 9.1· Network · High privileges · No interaction · EPSS 0.29097 · Published 2022-04-01 · No fix listed CWE-78
Priority MEDIUM 51
It is identified a vulnerability of insufficient authentication in the system configuration interface of Hitron Technologies CODA-5310.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00926 · Published 2023-06-02 · No fix listed CWE-306
Priority MEDIUM 50
Hitron CODA-4582 and CODA-4589 devices have default PSKs that are generated from 5-digit hex values concatenated with a "Hitron" substring, resulting in insufficient entropy (only about one million possibilities).
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00864 · Published 2024-02-23 · No fix listed CWE-331
Priority MEDIUM 50
Hitron Technologies CODA-5310 Telnet function with the default account and password, and there is no warning or prompt to ask users to change the default password and account.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00848 · Published 2023-06-02 · No fix listed CWE-1392
Priority MEDIUM 40
Hitron CVE-30360 devices use a 578A958E3DD933FC DES key that is shared across different customers' installations, which makes it easier for attackers to obtain sensitive information by decrypting a backup configuration f…
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.03994 · Published 2018-01-07 · No fix listed CWE-310
Priority LOW 39
Hitron Technologies CODA-5310’s Telnet function transfers sensitive data in plaintext.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00491 · Published 2023-06-02 · No fix listed CWE-319
Priority LOW 36
Hitron CODA-5310 has insufficient filtering for specific parameters in the connection test function.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01281 · Published 2023-06-02 · No fix listed CWE-78
Priority LOW 34
Hitron CODA-5310 has hard-coded encryption/decryption keys in the program code.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.0051 · Published 2023-06-02 · No fix listed CWE-798
Priority LOW 25
Hitron CODA-4582U 7.1.1.30 devices allow XSS via a Managed Device name on the Wireless > Access Control > Add Managed Device screen.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00557 · Published 2020-02-19 · No fix listed CWE-79
Priority LOW 24
An issue in Hitron HI3120 v.7.2.4.5.2b1 allows a local attacker to obtain sensitive information via the Logout option in the index.html
CVSS 3.1 MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00121 · Published 2025-12-15 · No fix listed CWE-200
Priority LOW 21
Hitron HI3120 v7.2.4.5.2b1 allows stored XSS via the Parental Control option when creating a new filter.
CVSS 3.1 MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00184 · Published 2026-02-09 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
4 4 3 0 0
THREATIST.IORead the docs