CVE-2014-2361

High

Published: 24/07/2014(UTC)Translated: 17/06/2026(UTC)NVD NIST

Summary

OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules do not require authentication to read the site security key, allowing nearby attackers to spoof communication.

Risk Assessment

The lack of authentication poses a risk that attackers can gain access to the security key, potentially leading to communication takeover and data manipulation.

Recommendation

It is recommended to implement authentication mechanisms for access to the security key and to regularly monitor access to the devices.

Other vulnerabilities in OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules

CVE-2014-2362High
OleumTech WIO DH2 Wireless I/O Modules rely exclusively on a time value for entropy in key generation, making it easier for remote attackers to defeat cryptographic protection mechanisms by predicting the time of project creation.

Original NVD description (English source)

OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules, when BreeZ is used, do not require authentication for reading the site security key, which allows physically proximate attackers to spoof communication by obtaining this key after use of direct hardware access or manual-setup mode.