Vulnerabilities > Hitrontech > High

DATE CVE VULNERABILITY TITLE RISK
2023-06-02 CVE-2022-47616 OS Command Injection vulnerability in Hitrontech Coda-5310 Firmware
Hitron CODA-5310 has insufficient filtering for specific parameters in the connection test function.
network
low complexity
hitrontech CWE-78
7.2
2022-04-01 CVE-2022-25017 OS Command Injection vulnerability in Hitrontech Chita Firmware 7.2.2.0.3B6Cd
Hitron CHITA 7.2.2.0.3b6-CD devices contain a command injection vulnerability via the Device/DDNS ddnsUsername field.
network
low complexity
hitrontech CWE-78
8.8
2018-01-07 CVE-2014-10069 Cryptographic Issues vulnerability in Hitrontech Cve-30360 Firmware 3.1.1.21
Hitron CVE-30360 devices use a 578A958E3DD933FC DES key that is shared across different customers' installations, which makes it easier for attackers to obtain sensitive information by decrypting a backup configuration file, as demonstrated by a password hash in the um_auth_account_password field.
network
low complexity
hitrontech CWE-310
7.5