Hitron Technologies CODA-5310’s Telnet function transfers sensitive data in plaintext. An unauthenticated remote attacker can exploit this vulnerability to access credentials of normal users and administrator.
oryginał ENCVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NHitrontech Coda 5310
HWHitrontechwszystkie wersjeHitrontech Coda 5310 Firmware
OSHitrontech7.2.4.7.1b3
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Powiązane podatności
CVE-2023-30603CRITICAL9.8ten sam produkt
Hitron Technologies CODA-5310 Telnet function with the default account and password, and there is no warning o...
CVE-2023-30604CRITICAL9.8ten sam produkt
It is identified a vulnerability of insufficient authentication in the system configuration interface of Hitro...
CVE-2022-47616HIGH7.2ten sam produkt
Hitron CODA-5310 has insufficient filtering for specific parameters in the connection test function. A remote ...
CVE-2022-47617HIGH7.2ten sam produkt
Hitron CODA-5310 has hard-coded encryption/decryption keys in the program code. A remote attacker authenticate...
CVE-2024-25730CRITICAL9.8PL ✓ten sam vendor
Hitron CODA-4582/4589 — słabe domyślne klucze PSK z niewystarczającą entropią