VULNERABILITY INTELLIGENCE

CVE-2014-2362

CVSS score7.8 HIGH
EPSS probability1.58%
CISA KEVNot currently listed
Published2014-07-24
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:C/I:P/A:N

Description

OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules rely exclusively on a time value for entropy in key generation, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by predicting the time of project creation.

Weakness classification

  • CWE-338: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Primary references