CVE-2014-2362 OleumTech WIO Use of Cryptographically Weak Pseudo-Random Number Generator
HighCVSS 7.8
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules rely exclusively on a time value for entropy in key generation, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by predicting the time of project creation.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oleumtech sensor wireless io module | All versions | No fix listed |
| oleumtech wio dh2 wireless gateway | All versions | No fix listed |
| oleumtech wio dh2 wireless gateway | = All versions | No fix listed |
| oleumtech Sensor Wireless I/O Modules | = All versions | No fix listed |
References
- support.oleumtech.com
- 68797 vdb-entry
- www.cisa.gov
- ics-cert.us-cert.gov third-party-advisory us-government-resource
- 68800 vdb-entry