CVE-2023-30603

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Hitron Technologies CODA-5310 Telnet function with the default account and password, and there is no warning or prompt to ask users to change the default password and account. An unauthenticated remote attackers can exploit this vulnerability to obtain the administrator’s privilege, resulting in performing arbitrary system operation or disrupt service.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-1392

Affected software

No affected versions have been published.

Timeline

Published: Jun 2, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-306049.8It is identified a vulnerability of insufficient authentication in the system configuration interface of Hitron Technologies CODA-5310. An u CVE-2023-306056.5Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacke CVE-2023-306064.9Discourse is an open source platform for community discussion. In affected versions a user logged as an administrator can call arbitrary met CVE-2023-306078.8icingaweb2-module-jira provides integration with Atlassian Jira. Starting in version 1.3.0 and prior to version 1.3.2, template and field co CVE-2023-306087.5sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL parser contains a regular expression that is vulnera CVE-2023-306094.7matrix-react-sdk is a react-based SDK for inserting a Matrix chat/VoIP client into a web page. Prior to version 3.71.0, plain text messages CVE-2023-30619.8A vulnerability was found in code-projects Agro-School Management System 1.0 and classified as critical. This issue affects some unknown pro CVE-2023-306105.5aws-sigv4 is a rust library for low level request signing in the aws cloud platform. The `aws_sigv4::SigningParams` struct had a derived `De CVE-2023-306115.3Discourse-reactions is a plugin that allows user to add their reactions to the post in the Discourse messaging platform. In affected version CVE-2023-306124.9Cloud hypervisor is a Virtual Machine Monitor for Cloud workloads. This vulnerability allows users to close arbitrary open file descriptors CVE-2023-306139.0Kiwi TCMS, an open source test management system, allows users to upload attachments to test plans, test cases, etc. In versions of Kiwi TCM CVE-2023-306146.1Pay is a payments engine for Ruby on Rails 6.0 and higher. In versions prior to 6.3.2 a payments info page of Pay is susceptible to reflecte