CVE-2024-25730

{"id": "CVE-2024-25730", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2024-02-23T22:15:55.017", "references": [{"url": "https://github.com/actuator/cve/blob/main/Hitron/CVE-2024-25730", "source": "cve@mitre.org"}, {"url": "https://i.ebayimg.com/images/g/I-8AAOSwGE9lsGwI/s-l1600.webp", "source": "cve@mitre.org"}, {"url": "https://i.ebayimg.com/images/g/MwMAAOSwjTFk3kpd/s-l1600.webp", "source": "cve@mitre.org"}, {"url": "https://i.ebayimg.com/images/g/VDcAAOSwlodlSuz4/s-l1600.webp", "source": "cve@mitre.org"}, {"url": "https://i.ebayimg.com/images/g/XaAAAOSwvMNkuESk/s-l1600.webp", "source": "cve@mitre.org"}, {"url": "https://i.ebayimg.com/images/g/hzUAAOSwUwVllGMZ/s-l1600.webp", "source": "cve@mitre.org"}, {"url": "https://i.ebayimg.com/images/g/qK8AAOSwbr9lq3PJ/s-l1600.webp", "source": "cve@mitre.org"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-331"}]}], "descriptions": [{"lang": "en", "value": "Hitron CODA-4582 and CODA-4589 devices have default PSKs that are generated from 5-digit hex values concatenated with a \"Hitron\" substring, resulting in insufficient entropy (only about one million possibilities)."}, {"lang": "es", "value": "Los dispositivos Hitron CODA-4582 y CODA-4589 tienen PSK predeterminados que se generan a partir de valores hexadecimales de 5 d\u00edgitos concatenados con una subcadena \"Hitron\", lo que resulta en una entrop\u00eda insuficiente (s\u00f3lo alrededor de un mill\u00f3n de posibilidades)."}], "lastModified": "2024-08-16T18:35:08.673", "sourceIdentifier": "cve@mitre.org"}