PT-2014-4650 · Oleumtech · Oleumtech Wio Dh2 Wireless Gateway+1

Publicado 2014-07-24 · Atualizado 2016-11-28 · CVE-2014-2362

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:P/A:N

Name of the Vulnerable Software and Affected Versions OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules (affected versions not specified)

Description The issue concerns the key generation mechanism, which relies solely on a time value for entropy. This makes it easier for remote attackers to predict the time of project creation and defeat cryptographic protection mechanisms.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2014-2362

Produtos afetados

Oleumtech Wio Dh2 Wireless Gateway

Sensor Wireless I/O Modules

Referências · 3

• http://securityfocus.com/bid/68800 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-2362 · Nota de Segurança
• http://ics-cert.us-cert.gov/advisories/ICSA-14-202-01 · Nota