CVE-2022-47617
Assigner: twcert
Published: 2023-06-02T00:00:00
State: PUBLISHED
title: Hitron Technologies Inc. CODA-5310 - Hard-coded Cryptographic Key
datePublic: 2023-05-02T00:00:00
descriptions: value: Hitron CODA-5310 has hard-coded encryption/decryption keys in the program code. A remote attacker authenticated as an administrator can decrypt system files using the hard-coded keys for file access, modification, and cause service disruption.
affected: vendor: Hitron Technologies Inc.
product: Hitron CODA-5310
versions: version: all version
status: affected
metrics: cvssV3_1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 7.2
baseSeverity: HIGH
problemTypes: descriptions: type: CWE
description: CWE-798: Use of Hard-coded Credentials
cweId: CWE-798
x_generator: engine: Vulnogram 0.0.9
source: advisory: TVN-202212006
discovery: EXTERNAL
solutions: value: Hitron Technologies Inc. has provided a problem-solving version to the internet service provider and informed them to upgrade. If there are any issues, please contact the network provider.