CVE-2014-10069

CVE-2014-10069 affects Hitron CVE-30360 devices and their firmware, stemming from the use of a hardcoded, shared DES key (578A958E3DD933FC) across customer installations. This vulnerability allows an unauthenticated attacker to decrypt backup configuration files, potentially exposing sensitive data like password hashes, as demonstrated by the um_auth_account_password field. With a CVSS score of 7.5 (High), the attack requires no user interaction and has a high impact on confidentiality. Despite its severity, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB, and it has received minimal community discussion or media coverage.