The Hitron CGNV4 modem / router suffers session management, cross site request forgery, and command injection vulnerabilities.