CVE-2024-25730

Published: Feb 23, 2024Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Hitron CODA-4582 and CODA-4589 devices have default PSKs that are generated from 5-digit hex values concatenated with a "Hitron" substring, resulting in insufficient entropy (only about one million possibilities).

Affected (2)

Products: Hitrontech: Coda 4582u Firmware, Coda 4589 Firmware

Hitrontech

2 products

Coda 4582u Firmware

Coda 4589 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hitrontech Coda 4582u Firmware	All versions

Running on/with	Platform Versions
Hitrontech Coda 4582u	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hitrontech Coda 4589 Firmware	All versions

Running on/with	Platform Versions
Hitrontech Coda 4589	All versions

Related CWEs

CWE-331

Insufficient Entropy

The product uses an algorithm or scheme that produces insufficient entropy, leaving patterns or clusters of values that are more likely to occur than others.

References (14)

https://github.com/actuator/cve/blob/main/Hitron/CVE-2024-25730

Source: cve@mitre.org

Third Party Advisory

https://i.ebayimg.com/images/g/I-8AAOSwGE9lsGwI/s-l1600.webp

Source: cve@mitre.org

Product

https://i.ebayimg.com/images/g/MwMAAOSwjTFk3kpd/s-l1600.webp

Source: cve@mitre.org

Product

https://i.ebayimg.com/images/g/VDcAAOSwlodlSuz4/s-l1600.webp

Source: cve@mitre.org

Product

https://i.ebayimg.com/images/g/XaAAAOSwvMNkuESk/s-l1600.webp

Source: cve@mitre.org

Product

https://i.ebayimg.com/images/g/hzUAAOSwUwVllGMZ/s-l1600.webp

Source: cve@mitre.org

Product

https://i.ebayimg.com/images/g/qK8AAOSwbr9lq3PJ/s-l1600.webp

Source: cve@mitre.org

Product

https://github.com/actuator/cve/blob/main/Hitron/CVE-2024-25730