CVE-2025-63354: Hitron HI3120 · Cross-site Scripting
Source CVE Database V5
Not known to be exploited · CVSS 4.8 Medium.
Data as of 26 Oct 2026, 15:59 UTC
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 7% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:NExploitation evidence
Disclosed: evidence found.
CVE published 9 Feb 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
AI-suggested
To mitigate CVE-2025-63354, European organizations should implement the following specific measures: 1) Restrict access to the router's management interface strictly to trusted administrators via network segmentation and VPNs to reduce exposure. 2) Enforce strong authentication mechanisms, including multi-factor authentication, to limit the risk of credential compromise. 3) Monitor router logs and network traffic for unusual activity indicative of attempted XSS exploitation or unauthorized access. 4) Apply strict input validation and sanitization on the Parental Control feature inputs if custom firmware or management tools are used. 5) Engage with Hitron or device vendors to obtain firmware updates or patches addressing this vulnerability as soon as they become available. 6) Educate network administrators about the risks of stored XSS and the importance of cautious input handling and session management. 7) Consider deploying web application firewalls or intrusion detection systems capable of detecting XSS payloads targeting router management interfaces. These steps go beyond generic advice by focusing on access control, monitoring, and vendor engagement specific to the Hitron HI3120 context.
Description
Hitron HI3120 v7.2.4.5.2b1 allows stored XSS via the Parental Control option when creating a new filter. The device fails to properly handle inputs, allowing an attacker to inject and execute JavaScript.