CVE-2014-2362

2014-07-2414:55:07

[email protected]

web.nvd.nist.gov

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:C/I:P/A:N

AI Score

6.6

Confidence

Low

EPSS

0.002

Percentile

53.6%

JSON

OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules rely exclusively on a time value for entropy in key generation, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by predicting the time of project creation.

Affected configurations

Nvd

Node

oleumtechsensor_wireless_i\/o_moduleMatch-

oleumtechwio_dh2_wireless_gatewayMatch-

VendorProductVersionCPE
oleumtechsensor_wireless_i\/o_module-cpe:2.3:h:oleumtech:sensor_wireless_i\/o_module:-:*:*:*:*:*:*:*
oleumtechwio_dh2_wireless_gateway-cpe:2.3:h:oleumtech:wio_dh2_wireless_gateway:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oleumtech	sensor_wireless_i\/o_module	-	cpe:2.3:h:oleumtech:sensor_wireless_i\/o_module:-:::::::*
oleumtech	wio_dh2_wireless_gateway	-	cpe:2.3:h:oleumtech:wio_dh2_wireless_gateway:-:::::::*