Search vulnerabilities

Results 3

Export CSV
CVE-2014-2362

OleumTech WIO Use of Cryptographically Weak Pseudo-Random Number Generator

OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules rely exclusively on a time value for entropy in key generation, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by predicting the time of project creation.

CVSS 2.0 · 7.8 High EPSS 1.6% KEV · Not listed
Vendors
CVE-2014-2361

OleumTech WIO Family Key Management Errors

OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules, when BreeZ is used, do not require authentication for reading the site security key, which allows physically proximate attackers to spoof communication by obtaining this key after use of direct hardware access or manual-setup mode.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors