Vulnerability · Published Jun 2, 2023 · Assigned by twcert
CVE-2023-30603Hitron Technologies Inc. CODA-5310 - Using default credentials
Critical 9.8
In plain English
A critical-severity security flaw in Hitron CODA-5310 from Hitron Technologies Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 58% of all known vulnerabilities).
Official description
Hitron Technologies CODA-5310 Telnet function with the default account and password, and there is no warning or prompt to ask users to change the default password and account. An unauthenticated remote attackers can exploit this vulnerability to obtain the administrator’s privilege, resulting in performing arbitrary system operation or disrupt service.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Hitron Technologies Inc. | Hitron CODA-5310 | v7.2.4.7.1b3 |
Weakness: CWE-1392 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H