Hitrontech vulnerabilities
We track 6 vulnerabilities in Hitrontech products across 3 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on February 23, 2024.
Latest Hitrontech vulnerabilities
- 9.8 Critical severity
coda-4582u_firmware: Insufficient Entropy
Hitron CODA-4582 and CODA-4589 devices have default PSKs that are generated from 5-digit hex values concatenated with a "Hitron" substring, resulting in insufficient entropy (only about one million possibilities).
- 9.8 Critical severity
Hitron CODA-5310: Missing Authentication for Critical Functionality
It is identified a vulnerability of insufficient authentication in the system configuration interface of Hitron Technologies CODA-5310. An unauthorized remote attacker can exploit this vulnerability to access system configuration interface, resulting in perfor
- 9.8 Critical severity
Hitron CODA-5310: Use of Default Credentials
Hitron Technologies CODA-5310 Telnet function with the default account and password, and there is no warning or prompt to ask users to change the default password and account. An unauthenticated remote attackers can exploit this vulnerability to obtain the adm
- 7.5 High severity
Hitron CODA-5310: Cleartext Transmission of Sensitive Information
Hitron Technologies CODA-5310’s Telnet function transfers sensitive data in plaintext. An unauthenticated remote attacker can exploit this vulnerability to access credentials of normal users and administrator.
- 7.2 High severity
Hitron CODA-5310: Use of Hard-coded Credentials
Hitron CODA-5310 has hard-coded encryption/decryption keys in the program code. A remote attacker authenticated as an administrator can decrypt system files using the hard-coded keys for file access, modification, and cause service disruption.
- 7.2 High severity
Hitron CODA-5310: Improper Neutralization of Special Elements used in an OS Command
Hitron CODA-5310 has insufficient filtering for specific parameters in the connection test function. A remote attacker authenticated as an administrator, can use the management page to perform command injection attacks, to execute arbitrary system command, man