CVE-2023-30603 Hitron Technologies Inc. CODA-5310 - Using default credentials

Critical 9.8 Published 2 Jun 2023 Updated 8 Jan 2025

Attackers can use default Telnet credentials to gain administrator privileges and execute arbitrary commands on Hitron CODA-5310 modems.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2023-30603?

CVE-2023-30603 is a critical vulnerability in Hitron CODA-5310, published on 2 Jun 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Hitron Technologies CODA-5310 Telnet function with the default account and password, and there is no warning or prompt to ask users to change the default password and account. An unauthenticated remote attackers can exploit this vulnerability to obtain the administrator’s privilege, resulting in performing arbitrary system operation or disrupt service.

Weakness: CWE-1392

Which versions are affected by CVE-2023-30603?

It affects 1 product.

Products include Hitrontech Coda-5310 Firmware.

How do I fix CVE-2023-30603?

No fix has been published for CVE-2023-30603 yet. Limit exposure of the affected software until one is available.

Is CVE-2023-30603 being exploited?

There is no known exploitation of CVE-2023-30603 in the wild and no public exploit code.

Sources

Also known as GHSA-vppr-7254-jpr7.