Hitron HI3120 v7.2.4.5.2b1 allows stored XSS via the Parental Control option when creating a new filter. The device fails to properly handle inputs, allowing an attacker to inject and execute JavaScript.

Last Modified: Feb 17, 2026

Published: Feb 09, 2026

CVE-2025-66963

An issue in Hitron HI3120 v.7.2.4.5.2b1 allows a local attacker to obtain sensitive information via the Logout option in the index.html

Last Modified: Dec 23, 2025

Published: Dec 15, 2025

CVE-2024-31973

Hitron CODA-4582 2AHKM-CODA4589 7.2.4.5.1b8 devices allow a remote attacker within Wi-Fi proximity to conduct stored XSS attacks via the 'Network Name (SSID)' input fields to the /index.html#wireless_basic page.

Last Modified: Apr 15, 2026

Published: Oct 30, 2024

CVE-2024-25730

Hitron CODA-4582 and CODA-4589 devices have default PSKs that are generated from 5-digit hex values concatenated with a "Hitron" substring, resulting in insufficient entropy (only about one million possibilities).

Last Modified: May 05, 2025

Published: Feb 23, 2024

CVE-2022-47616

Hitron Technologies Inc. CODA-5310 - Remote Command Execution

Last Modified: Jan 10, 2025

Published: Jun 02, 2023

Items Per Page