CVE-2014-2378CWE-494

CVE-2014-2378: vulnerability in Sensys Networks VSN240-F

Sensys Networks Traffic Sensor Download of Code Without Integrity Check

Published · Updated

Follow this CVE+ Monitor VSN240-F+ Monitor VSN240-T

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 0.9%
Sensys Networks VSN240-F and VSN240-T sensors VDS before 2.10.1 and TrafficDOT before 2.10.3 do not verify the integrity of downloaded updates, which allows remote attackers to execute arbitrary code via a Trojan horse update.
AV:A/AC:H/Au:N/C:C/I:C/A:P
Affected products
Sensys Networks · VSN240-FSensys Networks · VSN240-T
Related CVEs — Sensys Networks VSN240-F

In the same product, most dangerous first.

CVE-2014-2379—Sensys Networks Traffic Sensor Missing Encryption of Sensitive DataEPSS 0.3%