Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-63354 1 Hitron 1 Hi3120 2026-02-10 4.6 Medium
Hitron HI3120 v7.2.4.5.2b1 allows stored XSS via the Parental Control option when creating a new filter. The device fails to properly handle inputs, allowing an attacker to inject and execute JavaScript.
CVE-2025-66963 2 Hitron, Hitrontech 3 Hi3120, Hi3120, Hi3120 Firmware 2025-12-23 5.5 Medium
An issue in Hitron HI3120 v.7.2.4.5.2b1 allows a local attacker to obtain sensitive information via the Logout option in the index.html