Hitron CVE-30360 devices use a 578A958E3DD933FC DES key that is shared across different customers' installations, which makes it easier for attackers to obtain sensitive information by decrypting a backup configuration file, as demonstrated by a password hash in the um_auth_account_password field.
Published at: January 08, 2018 at 01:29AM
View on website
New vulnerability on the NVD: CVE-2014-10069
Tag: government hack NVD security
No comments: