CVE-2023-30603criticalCWE-1392

CVE-2023-30603: critical vulnerability in Hitron CODA-5310

Hitron Technologies Inc. CODA-5310 - Using default credentials

Published · Updated

Follow this CVE+ Monitor Hitron CODA-5310

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.8epss 0.8%
In short

The Hitron CODA-5310 modem comes with default username and password for Telnet access that cannot be easily changed, allowing anyone on the network to gain full administrator control without authentication.

Technical detail

The CODA-5310 exposes an unauthenticated Telnet interface with hardcoded default credentials (CWE-1392: Use of Hard-coded Credentials). Remote attackers can connect via Telnet, authenticate with default account details, and obtain administrative privileges to execute arbitrary commands or disable the device. No forced credential change mechanism exists, leaving the system persistently vulnerable.

Summary generated and translated by AI from the official description.
Hitron Technologies CODA-5310 Telnet function with the default account and password, and there is no warning or prompt to ask users to change the default password and account. An unauthenticated remote attackers can exploit this vulnerability to obtain the administrator’s privilege, resulting in performing arbitrary system operation or disrupt service.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Hitron Technologies Inc. · Hitron CODA-5310
Related CVEs — Hitron CODA-5310

In the same product, most dangerous first.

CVE-2022-47616HIGHHitron Technologies Inc. CODA-5310 - Remote Command ExecutionEPSS 1.3%CVE-2023-30604CRITICALHitron Technologies Inc. CODA-5310 - Broken Access ControlEPSS 0.9%CVE-2022-47617HIGHHitron Technologies Inc. CODA-5310 - Hard-coded Cryptographic KeyEPSS 0.5%CVE-2023-30602HIGHHitron Technologies Inc. CODA-5310 - Insecure service TelnetEPSS 0.5%