Skip to content
OpenAdvisories
High ICSA-14-202-01A 3 CVEs

OleumTech WIO Family Vulnerabilities

Published Apr 23, 2014 · Updated Jun 6, 2025 · Revision 2

Vendor: OleumTech Product: Sensor Wireless I/O Modules Product: WIO DH2 Wireless Gateway

Vulnerabilities 3

  • High 7.8
    CVE-2014-2362

    OleumTech WIO Use of Cryptographically Weak Pseudo-Random Number Generator

    OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules rely exclusively on a time value for entropy in key generation, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by predicting the time of project creat…

    OleumTech Sensor Wireless I/O Modules WIO DH2 Wireless Gateway
  • High 7.2
    CVE-2014-2361

    OleumTech WIO Family Key Management Errors

    OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules, when BreeZ is used, do not require authentication for reading the site security key, which allows physically proximate attackers to spoof communication by obtaining this key after use of dire…

    OleumTech WIO DH2 Wireless Gateway Sensor Wireless I/O Modules
  • Medium 5.0
    CVE-2014-2360

    OleumTech WIO Family Improper Input Validation

    OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules allow remote attackers to execute arbitrary code via packets that report a high battery voltage.

    OleumTech WIO DH2 Wireless Gateway Sensor Wireless I/O Modules

Revision history

  1. #2

    Advisory converted into a CSAF

  2. #1

    Initial Publication

References