CVE-2014-2362CWE-338

CVE-2014-2362: vulnerability in OleumTech WIO DH2 Wireless Gateway

OleumTech WIO Use of Cryptographically Weak Pseudo-Random Number Generator

Published · Updated

Follow this CVE+ Monitor Sensor Wireless I/O Modules+ Monitor WIO DH2 Wireless Gateway

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.8epss 1.6%
OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules rely exclusively on a time value for entropy in key generation, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by predicting the time of project creation.
AV:N/AC:M/Au:N/C:C/I:P/A:N
Affected products
OleumTech · Sensor Wireless I/O ModulesOleumTech · WIO DH2 Wireless Gateway
Related CVEs — OleumTech WIO DH2 Wireless Gateway

In the same product, most dangerous first.

CVE-2014-2360—OleumTech WIO Family Improper Input ValidationEPSS 3.4%CVE-2014-2361—OleumTech WIO Family Key Management ErrorsEPSS 0.4%