Skip to content
OpenAdvisories
High · 7.8 CVE-2014-2362 EUVD-2014-2399GHSA-prwj-528c-65r9

OleumTech WIO Use of Cryptographically Weak Pseudo-Random Number Generator

Published Jul 24, 2014 · Updated Oct 6, 2025 · Assigned by icscert

Description

OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules rely exclusively on a time value for entropy in key generation, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by predicting the time of project creation.

Affected products

VendorProductAffectedFixed
OleumTech WIO DH2 Wireless Gateway All versions —
OleumTech Sensor Wireless I/O Modules All versions —

Advisories 1

References