Skip to content
OpenAdvisories
High · 7.2 CVE-2022-47616 EUVD-2022-50376GHSA-4rrc-vmwv-7h7g

Hitron Technologies Inc. CODA-5310 - Remote Command Execution

Published Jun 2, 2023 · Updated Jan 10, 2025 · Assigned by twcert

Description

Hitron CODA-5310 has insufficient filtering for specific parameters in the connection test function. A remote attacker authenticated as an administrator, can use the management page to perform command injection attacks, to execute arbitrary system command, manipulate system or disrupt service.

Affected products

VendorProductAffectedFixed
Hitron Technologies Hitron CODA-5310 all version —

References