Lucene search
PRIOn knowledge basePRION:CVE-2014-2378HistorySep 05, 2014 - 5:55 p.m.
Code injection
2014-09-0517:55:00
PRIOn knowledge base
www.prio-n.com
7
Sensys Networks VSN240-F and VSN240-T sensors VDS before 2.10.1 and TrafficDOT before 2.10.3 do not verify the integrity of downloaded updates, which allows remote attackers to execute arbitrary code via a Trojan horse update.
| CPE | Name | Operator | Version |
|---|---|---|---|
| trafficdot | le | 2.10.2 | |
| trafficdot | eq | 2.8.3 | |
| trafficdot | eq | 2.10.0 | |
| trafficdot | eq | 2.10.1 | |
| vds | le | 2.10.0 | |
| vds | eq | 1.8.5 | |
| vds | eq | 1.8.7 | |
| vds | eq | 2.6.3 | |
| vds | eq | 2.6.4 |
Related
cve
cve
CVE-2014-2378
2014-09-05 17:55:06
cvelist
cvelist
CVE-2014-2378
2014-09-05 17:00:00
nvd
nvd
CVE-2014-2378
2014-09-05 17:55:06
ics
ics
Sensys Networks Traffic Sensor Vulnerabilities (Update A)
2014-10-28 12:00:00