Hitron Technologies Inc. CODA-5310 - Remote Command Execution
Priority LOW 36CWE-78Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-78.
Summary
Hitron CODA-5310 has insufficient filtering for specific parameters in the connection test function. A remote attacker authenticated as an administrator, can use the management page to perform command injection attacks, to execute arbitrary system command, manipulate system or disrupt service.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01281 70th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Hitron Technologies Inc. | Hitron CODA-5310 | all version | — | No fix listed | CNA |
- Hitron CODA-5310 VendorHitron Technologies Inc. Affected all version Fixed in — No fix listed CNA
CPE configurations NVD · 2
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:hitrontech:coda-5310_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hitron Technologies Inc. |
| cpe:2.3:h:hitrontech:coda-5310:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hitron Technologies Inc. |
- cpe:2.3:o:hitrontech:coda-5310_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hitron Technologies Inc.
- cpe:2.3:h:hitrontech:coda-5310:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hitron Technologies Inc.
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2022-47616
- 2026-10-03 Alias added: GHSA-4rrc-vmwv-7h7g
References
More Hitron Technologies Inc. Coda-5310 Firmware vulnerabilities
- TI-2023-14420 Hitron Technologies Inc. CODA-5310 - Broken Access Control CVSS 3.1CRITICAL 9.8
- TI-2023-14419 Hitron Technologies Inc. CODA-5310 - Using default credentials CVSS 3.1CRITICAL 9.8
- TI-2023-14418 Hitron Technologies Inc. CODA-5310 - Insecure service Telnet CVSS 3.1HIGH 7.5
- TI-2022-23655 Hitron Technologies Inc. CODA-5310 - Hard-coded Cryptographic Key CVSS 3.1HIGH 7.2
Sources
- CVE-2022-47616 · CVE Program
- CVE-2022-47616 · NVD
- FIRST EPSS
- GHSA-4rrc-vmwv-7h7g · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences