What’s Vulnerable › Vulnerabilities

CVE-2014-10069

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-01-07 · updated 2026-06-17
• Weakness: CWE-310

Description

Hitron CVE-30360 devices use a 578A958E3DD933FC DES key that is shared across different customers' installations, which makes it easier for attackers to obtain sensitive information by decrypting a backup configuration file, as demonstrated by a password hash in the um_auth_account_password field.

Affected products

• Hitrontech Cve-30360 Firmware: 3.1.1.21

References

• https://blogger.davidmanouchehri.com/2018/01/hitrons-encryption.html
• https://github.com/Manouchehri/hitron-cfg-decrypter
• https://github.com/habohitron/habohitron/blob/6add0d002fe553f0924a3bba197994c53ca7d52d/firmwares/3.1.1.21/analyse/hc.c#L17
• https://blogger.davidmanouchehri.com/2018/01/hitrons-encryption.html
• https://github.com/Manouchehri/hitron-cfg-decrypter
• https://github.com/habohitron/habohitron/blob/6add0d002fe553f0924a3bba197994c53ca7d52d/firmwares/3.1.1.21/analyse/hc.c#L17

Get alerted when CVE-2014-10069 or the next vulnerability affects your stack