CVE-2023-30603CWE-1392

Hitron Technologies Inc. CODA-5310 - Using default credentials

Critical ยท published June 2, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
57.7
In the wild
Unconfirmed
What it is

๐Ÿšจ Default credentials still in play! Hitron Technologies' CODA-5310 lets anyone waltz in with factory settings โ€“ no password change warning in sight! ๐Ÿ”ฅ Think of it as a hotel that never bothers to change its master key, allowing anyone with a little knowledge to open any door they want โ€” no questions asked. All it takes is knowing that the default passcode is still โ€˜1234โ€™! An attacker could grab administrator privileges without breaking a sweat, gaining full control over the system. This means they could perform arbitrary operations or even bring your services crashing down, leaving you vulnerable and your users at risk. Yikes!

Put simply

Think of it as a hotel that never bothers to change its master key, allowing anyone with a little knowledge to open any door they want โ€” no questions asked. All it takes is knowing that the default passcode is still โ€˜1234โ€™! This vulnerability allows unauthenticated remote attackers to exploit the Telnet function of the CODA-5310 to gain administrator access using default login credentials, which remain unchanged by many users.

What to do

An attacker could grab administrator privileges without breaking a sweat, gaining full control over the system. This means they could perform arbitrary operations or even bring your services crashing down, leaving you vulnerable and your users at risk. Yikes! Immediately change the default credentials on your CODA-5310 and disable Telnet if it's not in use. Ensure you're running the latest firmware version to mitigate any further risks. Don't leave the door open! You've got this! Just follow these steps and you'll be on your way to securing your network like a pro! ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS v3.1
9.8 ยท CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00848 ยท 57.7th percentile
Weakness
CWE-1392 ยท Use of Default Credentials
Published
2023-06-02T00:00Z
EPSS history
Timeline
  • 02 JUN 00:00Z
    Hitron Technologies Inc. CODA-5310 - Using default credentials
    cvelistv5