CVE-2014-2360CWE-20

CVE-2014-2360: vulnerability in OleumTech WIO DH2 Wireless Gateway

OleumTech WIO Family Improper Input Validation

Published · Updated

Follow this CVE+ Monitor Sensor Wireless I/O Modules+ Monitor WIO DH2 Wireless Gateway

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5epss 3.4%
OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules allow remote attackers to execute arbitrary code via packets that report a high battery voltage.
AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected products
OleumTech · Sensor Wireless I/O ModulesOleumTech · WIO DH2 Wireless Gateway
Related CVEs — OleumTech WIO DH2 Wireless Gateway

In the same product, most dangerous first.

CVE-2014-2362—OleumTech WIO Use of Cryptographically Weak Pseudo-Random Number GeneratorEPSS 1.6%CVE-2014-2361—OleumTech WIO Family Key Management ErrorsEPSS 0.4%