Hitrontech - vulnerabilities (CVEs)
13 CVEs in 12 products, 0 in the last 30 days, newest from 2026-02-09.
Products
- Coda-5310 Firmware - 5 CVEs
- Coda-4582u Firmware - 4 CVEs
- Coda-4589 Firmware - 2 CVEs
- Hi3120 Firmware - 2 CVEs
- Chita Firmware - 1 CVEs
- Cve-30360 Firmware - 1 CVEs
- Chita - 0 CVEs
- Coda-4582u - 0 CVEs
- Coda-4589 - 0 CVEs
- Coda-5310 - 0 CVEs
- Cve-30360 - 0 CVEs
- Hi3120 - 0 CVEs
Newest CVEs of Hitrontech
- CVE-2025-63354 - CVSS 4.8 (medium), 2026-02-09: Hitron HI3120 v7.2.4.5.2b1 allows stored XSS via the Parental Control option when creating a new filter. The device fails to properly handle inputs, allowing…
- CVE-2025-66963 - CVSS 5.5 (medium), 2025-12-15: An issue in Hitron HI3120 v.7.2.4.5.2b1 allows a local attacker to obtain sensitive information via the Logout option in the index.html
- CVE-2024-31973 - CVSS 5.2 (medium), 2024-10-30: Hitron CODA-4582 2AHKM-CODA4589 7.2.4.5.1b8 devices allow a remote attacker within Wi-Fi proximity to conduct stored XSS attacks via the 'Network Name (SSID)'…
- CVE-2024-28089 - CVSS 5.2 (medium), 2024-03-09: Hitron CODA-4582 2AHKM-CODA4589 7.2.4.5.1b8 devices allow a remote attacker within Wi-Fi proximity (who has access to the router admin panel) to conduct a…
- CVE-2024-25730 - CVSS 9.8 (critical), 2024-02-23: Hitron CODA-4582 and CODA-4589 devices have default PSKs that are generated from 5-digit hex values concatenated with a "Hitron" substring, resulting in…
- CVE-2022-47617 - CVSS 7.2 (high), 2023-06-02: Hitron CODA-5310 has hard-coded encryption/decryption keys in the program code. A remote attacker authenticated as an administrator can decrypt system files…
- CVE-2023-30604 - CVSS 9.8 (critical), 2023-06-02: It is identified a vulnerability of insufficient authentication in the system configuration interface of Hitron Technologies CODA-5310. An unauthorized remote…
- CVE-2023-30603 - CVSS 9.8 (critical), 2023-06-02: Hitron Technologies CODA-5310 Telnet function with the default account and password, and there is no warning or prompt to ask users to change the default…
- CVE-2023-30602 - CVSS 7.5 (high), 2023-06-02: Hitron Technologies CODA-5310’s Telnet function transfers sensitive data in plaintext. An unauthenticated remote attacker can exploit this vulnerability to…
- CVE-2022-47616 - CVSS 7.2 (high), 2023-06-02: Hitron CODA-5310 has insufficient filtering for specific parameters in the connection test function. A remote attacker authenticated as an administrator, can…
- CVE-2022-25017 - CVSS 9.1 (critical), 2022-04-01: Hitron CHITA 7.2.2.0.3b6-CD devices contain a command injection vulnerability via the Device/DDNS ddnsUsername field.
- CVE-2020-8824 - CVSS 5.4 (medium), 2020-02-19: Hitron CODA-4582U 7.1.1.30 devices allow XSS via a Managed Device name on the Wireless > Access Control > Add Managed Device screen.
- CVE-2014-10069 - CVSS 7.5 (high), 2018-01-07: Hitron CVE-30360 devices use a 578A958E3DD933FC DES key that is shared across different customers' installations, which makes it easier for attackers to…
