Hitrontech vulnerabilities
Published CVEs affecting Hitrontech products: 2 record(s), with severity, exploitation and fixes.
CVE-2025-63354
Medium · 4.8
CWE-79 Feb 9, 2026
Cross-site Scripting (XSS) in Hitrontech Hi3120 Firmware
Hitron HI3120 v7.2.4.5.2b1 allows stored XSS via the Parental Control option when creating a new filter. The device fails to properly handle inputs, allowing an attacker to inject and execute JavaScript.
CVE-2025-66963
Medium · 5.5
CWE-200 Dec 15, 2025
Exposure of Sensitive Information in Hitrontech Hi3120 Firmware
An issue in Hitron HI3120 v.7.2.4.5.2b1 allows a local attacker to obtain sensitive information via the Logout option in the index.html