CVE-2014-2361

Published: Jul 24, 2014Modified: May 6, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules, when BreeZ is used, do not require authentication for reading the site security key, which allows physically proximate attackers to spoof communication by obtaining this key after use of direct hardware access or manual-setup mode.

Affected (2)

Products: Oleumtech: Sensor Wireless I/o Module, Wio Dh2 Wireless Gateway

2 products

Sensor Wireless I/o Module

Wio Dh2 Wireless Gateway

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Oleumtech Sensor Wireless I/o Module	All versions
Oleumtech Wio Dh2 Wireless Gateway	All versions

Related CWEs

References (5)

http://support.oleumtech.com/

Source: ics-cert@hq.dhs.gov

http://www.securityfocus.com/bid/68797

Source: ics-cert@hq.dhs.gov

https://www.cisa.gov/news-events/ics-advisories/icsa-14-202-01a

Source: ics-cert@hq.dhs.gov

http://ics-cert.us-cert.gov/advisories/ICSA-14-202-01

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

http://www.securityfocus.com/bid/68795

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.