PT-2023-3548 · Hitron Technologies · Coda-5310

Lucas Yang · Published 2023-05-02 · Updated 2024-10-14 · CVE-2023-30602

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Hitron Technologies CODA-5310 (affected versions not specified)

Description The issue concerns the Telnet function of the Hitron Technologies CODA-5310, which transfers sensitive data in plaintext. This allows an unauthenticated remote attacker to exploit the vulnerability and access the credentials of both normal users and administrators.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Transmission of Sensitive Information

Missing Encryption of Sensitive Data

Weakness Enumeration

CWE-319

CWE-311

Related Identifiers

BDU:2023-03764

CVE-2023-30602

Affected Products

Coda-5310

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2023-30602 · Security Note
• https://bdu.fstec.ru/vul/2023-03764 · Security Note
• https://osv.dev/vulnerability/CVE-2023-30602 · Vendor Advisory
• https://twcert.org.tw/tw/cp-132-7084-74e83-1.html · Note
• https://t.me/cvenotify/51609 · Telegram Post
• https://t.me/cvenotify/97964 · Telegram Post
• https://vuldb.com/pt/?id.230556 · Note