PT-2014-4650 · Oleumtech · Oleumtech Wio Dh2 Wireless Gateway+1

Published 2014-07-24 · Updated 2016-11-28 · CVE-2014-2362

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:M/Au:N/C:C/I:P/A:N

Name of the Vulnerable Software and Affected Versions OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules (affected versions not specified)

Description The issue concerns the key generation mechanism, which relies solely on a time value for entropy. This makes it easier for remote attackers to predict the time of project creation and defeat cryptographic protection mechanisms.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2014-2362

Affected Products

Oleumtech Wio Dh2 Wireless Gateway

Sensor Wireless I/O Modules

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2014-2362 · Security Note
• http://securityfocus.com/bid/68800 · Note
• http://ics-cert.us-cert.gov/advisories/ICSA-14-202-01 · Note