CVEvulnerability

CVE-2014-2379

5.4 MEDIUM Published 2014-09-05 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-09-05
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:A/AC:H/Au:N/C:P/I:P/A:P
CVSS 2.0 ([email protected])
5.4 MEDIUM — AV:A/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-310, CWE-311

Description

Sensys Networks VSN240-F and VSN240-T sensors VDS before 2.10.1 and TrafficDOT before 2.10.3 do not use encryption, which allows remote attackers to interfere with traffic control by replaying transmissions on a wireless network.

Affected configurations

• sensysnetworks trafficdot (<= 2.10.2) • sensysnetworks trafficdot 2.8.3 • sensysnetworks trafficdot 2.10.0 • sensysnetworks trafficdot 2.10.1 • sensysnetworks vsn240-f • sensysnetworks vsn240-t • sensysnetworks vds (<= 2.10.0) • sensysnetworks vds 1.8.5 • sensysnetworks vds 1.8.7 • sensysnetworks vds 2.6.3 • sensysnetworks vds 2.6.4

Related

Weakness · not in database (1)

Weakness · CWE (1)

  • CWE-311 Missing Encryption of Sensitive Data weakness

References