oleumtech Sensor Wireless I/O Modules vulnerabilities

Latest oleumtech Sensor Wireless I/O Modules CVEs

Newest publication first

1. CVE-2014-2362 OleumTech WIO Use of Cryptographically Weak Pseudo-Random Number Generator

   Published 2014-07-24

   High·CVSS 7.8 EPSS 1.6%

   OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules rely exclusively on a time value for entropy in key generation, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by predicting the time of project creation.

2. CVE-2014-2361 OleumTech WIO Family Key Management Errors

   Published 2014-07-24

   High·CVSS 7.2 EPSS 0.40%

   OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules, when BreeZ is used, do not require authentication for reading the site security key, which allows physically proximate attackers to spoof communication by obtaining this key after use of direct hardware access or...

3. CVE-2014-2360 OleumTech WIO Family Improper Input Validation

   Published 2014-07-24

   High·CVSS 7.5 EPSS 3.4%

   OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules allow remote attackers to execute arbitrary code via packets that report a high battery voltage.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.