CVEvulnerability

CVE-2014-2378

7.6 HIGH Published 2014-09-05 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-09-05
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.5 MEDIUM — AV:A/AC:H/Au:N/C:C/I:C/A:P
CVSS 2.0 ([email protected])
7.6 HIGH — AV:A/AC:M/Au:N/C:C/I:C/A:P
Weaknesses
CWE-494, CWE-94

Description

Sensys Networks VSN240-F and VSN240-T sensors VDS before 2.10.1 and TrafficDOT before 2.10.3 do not verify the integrity of downloaded updates, which allows remote attackers to execute arbitrary code via a Trojan horse update.

Affected configurations

• sensysnetworks trafficdot (<= 2.10.2) • sensysnetworks trafficdot 2.8.3 • sensysnetworks trafficdot 2.10.0 • sensysnetworks trafficdot 2.10.1 • sensysnetworks vsn240-f • sensysnetworks vsn240-t • sensysnetworks vds (<= 2.10.0) • sensysnetworks vds 1.8.5 • sensysnetworks vds 1.8.7 • sensysnetworks vds 2.6.3 • sensysnetworks vds 2.6.4

Related

Weakness · CWE (2)

  • CWE-494 Download of Code Without Integrity Check weakness
  • CWE-94 Improper Control of Generation of Code weakness

References