CVE-2024-25730

Katalog CVE

CVSS 9.8 · Critical EPSS 0,86%

Kerentanan Insufficient Entropy pada hitrontech coda-4582u firmware, hitrontech coda-4589 firmware. Skor CVSS 3.1 9.8 (Critical) menurut CISA ADP.

Deskripsi (NVD)

Hitron CODA-4582 and CODA-4589 devices have default PSKs that are generated from 5-digit hex values concatenated with a "Hitron" substring, resulting in insufficient entropy (only about one million possibilities).

Rincian

Terbit di NVD

23 Februari 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-331: Insufficient Entropy

EPSS (30 hari)

0,86% peluang dieksploitasi; lebih tinggi dari 57,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/actuator/cve/blob/main/Hitron/CVE-2024-25730 advisory pihak ketiga
• https://i.ebayimg.com/images/g/I-8AAOSwGE9lsGwI/s-l1600.webp product
• https://i.ebayimg.com/images/g/MwMAAOSwjTFk3kpd/s-l1600.webp product
• https://i.ebayimg.com/images/g/VDcAAOSwlodlSuz4/s-l1600.webp product
• https://i.ebayimg.com/images/g/XaAAAOSwvMNkuESk/s-l1600.webp product
• https://i.ebayimg.com/images/g/hzUAAOSwUwVllGMZ/s-l1600.webp product
• https://i.ebayimg.com/images/g/qK8AAOSwbr9lq3PJ/s-l1600.webp product