VULNERABILITY INTELLIGENCE

CVE-2014-2378

CVSS score7.6 HIGH
EPSS probability0.90%
CISA KEVNot currently listed
Published2014-09-05
Last modified2026-06-17
CVSS vectorAV:A/AC:M/Au:N/C:C/I:C/A:P

Description

Sensys Networks VSN240-F and VSN240-T sensors VDS before 2.10.1 and TrafficDOT before 2.10.3 do not verify the integrity of downloaded updates, which allows remote attackers to execute arbitrary code via a Trojan horse update.

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')
  • CWE-494: Download of Code Without Integrity Check

Primary references