Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: OleumTech Clear all filters
TI-2014-01877 CVE-2014-2362 · GHSA-prwj-528c-65r9

OleumTech WIO Use of Cryptographically Weak Pseudo-Random Number Generator

Priority LOW 37

OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules rely exclusively on a time value for entropy in key generation, which makes it easier for remote attackers to defeat cryptographic protection mechanisms…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.01576 Published 2014-07-24 No fix listed CWE-338
TI-2014-01876 CVE-2014-2361 · GHSA-v95m-rxvv-9f67

OleumTech WIO Family Key Management Errors

Priority LOW 32

OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules, when BreeZ is used, do not require authentication for reading the site security key, which allows physically proximate attackers to spoof communication…

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.00401 Published 2014-07-24 No fix listed CWE-320
TI-2014-01875 CVE-2014-2360 · GHSA-hc29-9rhr-h2hp

OleumTech WIO Family Improper Input Validation

Priority LOW 39

OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules allow remote attackers to execute arbitrary code via packets that report a high battery voltage.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03432 Published 2014-07-24 No fix listed CWE-20