CVE-2014-2362

2014-07-2414:55:07

[email protected]

web.nvd.nist.gov

oleumtech

wio dh2

wireless gateway

sensor

wireless i/o modules

cve-2014-2362

time value

entropy

key generation

cryptographic protection

remote attackers

nvd

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:C/I:P/A:N

6.8 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

53.7%

JSON

OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules rely exclusively on a time value for entropy in key generation, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by predicting the time of project creation.

Affected configurations

NVD

Node

oleumtechsensor_wireless_i\/o_moduleMatch-

oleumtechwio_dh2_wireless_gatewayMatch-

CPENameOperatorVersion
oleumtech:sensor_wireless_i\/o_moduleoleumtech sensor wireless i/o moduleeq-
oleumtech:wio_dh2_wireless_gatewayoleumtech wio dh2 wireless gatewayeq-