CVE Vulnerabilities

CVE-2014-10069

Published: Jan 07, 2018 | Modified: Feb 02, 2018
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

Hitron CVE-30360 devices use a 578A958E3DD933FC DES key that is shared across different customers installations, which makes it easier for attackers to obtain sensitive information by decrypting a backup configuration file, as demonstrated by a password hash in the um_auth_account_password field.

Affected Software

Name Vendor Start Version End Version
Cve-30360_firmware Hitrontech 3.1.1.21 (including) 3.1.1.21 (including)

References