CVEvulnerability

CVE-2014-2362

7.8 HIGH Published 2014-07-24 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-07-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.8 HIGH — AV:N/AC:M/Au:N/C:C/I:P/A:N
CVSS 2.0 ([email protected])
7.8 HIGH — AV:N/AC:M/Au:N/C:C/I:P/A:N
Weaknesses
CWE-338

Description

OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules rely exclusively on a time value for entropy in key generation, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by predicting the time of project creation.

Affected configurations

• oleumtech sensor wireless i\/o module • oleumtech wio dh2 wireless gateway

Related

Weakness · CWE (1)

  • CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) weakness

References