Hitrontech

11 CVEs across 12 Hitrontech products. Browse Hitrontech vulnerabilities, severities, and proof-of-concept exploits.

Hitrontech products with known CVEs

ProductCVEs
Coda-53105
Coda-5310 Firmware5
Coda-4582u2
Coda-4582u Firmware2
Hi31202
Hi3120 Firmware2
Chita1
Chita Firmware1
Coda-45891
Coda-4589 Firmware1
Cve-303601
Cve-30360 Firmware1
Hitrontech CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-63354Medium4.82026-02-09Hitron HI3120 v7.2.4.5.2b1 allows stored XSS via the Parental Control option when creating a new filter. The device fails to properly handle inputs, allowing a…
CVE-2025-66963Medium5.52025-12-15An issue in Hitron HI3120 v.7.2.4.5.2b1 allows a local attacker to obtain sensitive information via the Logout option in the index.html
CVE-2024-25730Critical9.82024-02-23Hitron CODA-4582 and CODA-4589 devices have default PSKs that are generated from 5-digit hex values concatenated with a "Hitron" substring, resulting in insuff…
CVE-2023-30604Critical9.82023-06-02It is identified a vulnerability of insufficient authentication in the system configuration interface of Hitron Technologies CODA-5310. An unauthorized remote…
CVE-2023-30603Critical9.82023-06-02Hitron Technologies CODA-5310 Telnet function with the default account and password, and there is no warning or prompt to ask users to change the default passw…
CVE-2023-30602High7.52023-06-02Hitron Technologies CODA-5310’s Telnet function transfers sensitive data in plaintext. An unauthenticated remote attacker can exploit this vulnerability to acc…
CVE-2022-47617High7.22023-06-02Hitron CODA-5310 has hard-coded encryption/decryption keys in the program code. A remote attacker authenticated as an administrator can decrypt system files us…
CVE-2022-47616High7.22023-06-02Hitron CODA-5310 has insufficient filtering for specific parameters in the connection test function. A remote attacker authenticated as an administrator, can u…
CVE-2022-25017Critical9.12022-04-01Hitron CHITA 7.2.2.0.3b6-CD devices contain a command injection vulnerability via the Device/DDNS ddnsUsername field.
CVE-2020-8824Medium5.42020-02-19Hitron CODA-4582U 7.1.1.30 devices allow XSS via a Managed Device name on the Wireless > Access Control > Add Managed Device screen.
CVE-2014-10069High7.52018-01-07Hitron CVE-30360 devices use a 578A958E3DD933FC DES key that is shared across different customers' installations, which makes it easier for attackers to obtain…