PT-2014-4664 · Sensys Networks · Vsn240-F+2

Published 2014-09-05 · Updated 2025-10-13 · CVE-2014-2378

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:A/AC:H/Au:N/C:C/I:C/A:P

Name of the Vulnerable Software and Affected Versions Sensys Networks VSN240-F and VSN240-T sensors VDS versions prior to 2.10.1 Sensys Networks TrafficDOT versions prior to 2.10.3

Description The issue allows remote attackers to execute arbitrary code via a Trojan horse update because the integrity of downloaded updates is not verified.

Recommendations For Sensys Networks VSN240-F and VSN240-T sensors VDS versions prior to 2.10.1, update to version 2.10.1 or later. For Sensys Networks TrafficDOT versions prior to 2.10.3, update to version 2.10.3 or later.

Fix

Code Injection

Weakness Enumeration

CWE-494

CWE-94

Related Identifiers

CVE-2014-2378

Affected Products

Trafficdot

Vsn240-F

Vsn240-T

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2014-2378 · Security Note
• https://ics-cert.us-cert.gov/advisories/ICSA-14-247-01 · Note
• https://t.me/cveNotify/138474 · Telegram Post
• http://sensysnetworks.com/distributors · Note
• http://sensysnetworks.com/resources-by-category/#sw · Note
• https://cisa.gov/news-events/ics-advisories/icsa-14-247-01a · Note