CVE-2023-30603

moderate-risk
Published 2023-06-02

Hitron Technologies CODA-5310 Telnet function with the default account and password, and there is no warning or prompt to ask users to change the default password and account. An unauthenticated remote attackers can exploit this vulnerability to obtain the administrator’s privilege, resulting in performing arbitrary system operation or disrupt service.

Do I need to act?

-
0.70% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.8/10 Critical
NETWORK / LOW complexity

Affected Products (1)

Coda-5310 Firmware

Affected Vendors

Hitrontech

References (2)

Third Party Advisory https://www.twcert.org.tw/tw/cp-132-7085-13321-1.html
Third Party Advisory https://www.twcert.org.tw/tw/cp-132-7085-13321-1.html
39
/ 100
moderate-risk
Severity 32/34 · Critical
Exploitability 2/34 · Minimal
Exposure 5/34 · Minimal