CVE-2014-2361

2014-07-2414:55:07

[email protected]

web.nvd.nist.gov

cve-2014-2361

oleumtech

wio dh2

wireless gateway

sensor

authentication bypass

security key

breez

physically proximate attackers

communication spoofing

hardware access

manual-setup mode

nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

34.2%

JSON

OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules, when BreeZ is used, do not require authentication for reading the site security key, which allows physically proximate attackers to spoof communication by obtaining this key after use of direct hardware access or manual-setup mode.

Affected configurations

NVD

Node

oleumtechsensor_wireless_i\/o_moduleMatch-

oleumtechwio_dh2_wireless_gatewayMatch-

CPENameOperatorVersion
oleumtech:sensor_wireless_i\/o_moduleoleumtech sensor wireless i/o moduleeq-
oleumtech:wio_dh2_wireless_gatewayoleumtech wio dh2 wireless gatewayeq-