CVE-2014-2362

Published: Jul 24, 2014Modified: May 6, 2026

7.8

Vector

AV:N/AC:M/Au:N/C:C/I:P/A:N

Exploitability: 8.6 / Impact: 7.8

Source: NVD

Description

OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules rely exclusively on a time value for entropy in key generation, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by predicting the time of project creation.

Affected (2)

Products: Oleumtech: Sensor Wireless I/o Module, Wio Dh2 Wireless Gateway

2 products

Sensor Wireless I/o Module

Wio Dh2 Wireless Gateway

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Oleumtech Sensor Wireless I/o Module	All versions
Oleumtech Wio Dh2 Wireless Gateway	All versions

Related CWEs

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

The product uses a Pseudo-Random Number Generator (PRNG) in a security context, but the PRNG's algorithm is not cryptographically strong.

References (5)

http://support.oleumtech.com/

Source: ics-cert@hq.dhs.gov

http://www.securityfocus.com/bid/68797

Source: ics-cert@hq.dhs.gov

https://www.cisa.gov/news-events/ics-advisories/icsa-14-202-01a

Source: ics-cert@hq.dhs.gov

http://ics-cert.us-cert.gov/advisories/ICSA-14-202-01

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

http://www.securityfocus.com/bid/68800

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.