CVE Catalog

CVE-2025-66963

MediumCVSS 5.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.10%

1th percentile - higher than 1% of all known CVEs

Summary

A vulnerability in Hitron HI3120 version 7.2.4.5.2b1 allows a local attacker to obtain sensitive information via the Logout option in index.html.

Risk Assessment

The risk involves leakage of confidential data that could be used for further attacks on the network or device.

Recommendation

It is recommended to immediately update the firmware to the latest version and restrict local access to the device.

Original NVD description (English source)

An issue in Hitron HI3120 v.7.2.4.5.2b1 allows a local attacker to obtain sensitive information via the Logout option in the index.html

Vulnerability data from NVD (NIST) · CISA KEV · EPSS