CVE-2014-10069 Hitron CVE-30360 devices use a 578A958E3DD933FC DES key that is shared across different customers' installations, which makes it easier for attackers to obtain sensitive information by decrypting a ba...
HighCVSS 7.5
EPSS 4.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Hitron CVE-30360 devices use a 578A958E3DD933FC DES key that is shared across different customers' installations, which makes it easier for attackers to obtain sensitive information by decrypting a backup configuration file, as demonstrated by a password hash in the um_auth_account_password field.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hitrontech cve-30360 firmware | = 3.1.1.21 | No fix listed |
References
- blogger.davidmanouchehri.com third-party-advisory
- github.com broken-link
- github.com patch third-party-advisory