Vulnerabilities

TI-2023-14420 CVE-2023-30604 · GHSA-3jgf-vx5m-8pjm

Hitron Technologies Inc. CODA-5310 - Broken Access Control

MEDIUM 51

It is identified a vulnerability of insufficient authentication in the system configuration interface of Hitron Technologies CODA-5310.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00926 Published 2023-06-02 No fix listed CWE-306

TI-2023-14419 CVE-2023-30603 · GHSA-vppr-7254-jpr7

Hitron Technologies Inc. CODA-5310 - Using default credentials

MEDIUM 50

Hitron Technologies CODA-5310 Telnet function with the default account and password, and there is no warning or prompt to ask users to change the default password and account.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00848 Published 2023-06-02 No fix listed CWE-1392

TI-2023-14418 CVE-2023-30602 · GHSA-xhqg-j6g5-rp58

Hitron Technologies Inc. CODA-5310 - Insecure service Telnet

LOW 39

Hitron Technologies CODA-5310’s Telnet function transfers sensitive data in plaintext.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00491 Published 2023-06-02 No fix listed CWE-319

TI-2022-23655 CVE-2022-47617 · GHSA-3529-fghx-8h6c

Hitron Technologies Inc. CODA-5310 - Hard-coded Cryptographic Key

LOW 34

Hitron CODA-5310 has hard-coded encryption/decryption keys in the program code.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0051 Published 2023-06-02 No fix listed CWE-798

TI-2022-23654 CVE-2022-47616 · GHSA-4rrc-vmwv-7h7g

Hitron Technologies Inc. CODA-5310 - Remote Command Execution

LOW 36

Hitron CODA-5310 has insufficient filtering for specific parameters in the connection test function.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01281 Published 2023-06-02 No fix listed CWE-78