PT-2023-3548 · Hitron Technologies · Coda-5310

Lucas Yang · Publicado 2023-05-02 · Atualizado 2024-10-14 · CVE-2023-30602

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Hitron Technologies CODA-5310 (affected versions not specified)

Description The issue concerns the Telnet function of the Hitron Technologies CODA-5310, which transfers sensitive data in plaintext. This allows an unauthenticated remote attacker to exploit the vulnerability and access the credentials of both normal users and administrators.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Transmission of Sensitive Information

Missing Encryption of Sensitive Data

Enumeração de Fraquezas

CWE-319

CWE-311

Identificadores relacionados

BDU:2023-03764

CVE-2023-30602

Produtos afetados

Coda-5310

Referências · 7

• https://twcert.org.tw/tw/cp-132-7084-74e83-1.html · Nota
• https://t.me/cvenotify/51609 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-30602 · Nota de Segurança
• https://t.me/cvenotify/97964 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2023-03764 · Nota de Segurança
• https://vuldb.com/pt/?id.230556 · Nota
• https://osv.dev/vulnerability/CVE-2023-30602 · Aviso do Fabricante