Skip to content
OpenAdvisories
Medium · 6.5 CVE-2014-2378 EUVD-2014-2415GHSA-rpj9-vvgv-g3hf

Sensys Networks Traffic Sensor Download of Code Without Integrity Check

Published Sep 5, 2014 · Updated Oct 13, 2025 · Assigned by icscert

Vendor: Sensys Networks Product: VSN240-F Product: VSN240-T

Description

Sensys Networks VSN240-F and VSN240-T sensors VDS before 2.10.1 and TrafficDOT before 2.10.3 do not verify the integrity of downloaded updates, which allows remote attackers to execute arbitrary code via a Trojan horse update.

Affected products

VendorProductAffectedFixed
Sensys Networks VSN240-F < VDS 2.10.1, < VDS 1.8.8, < TrafficDOT 2.10.3 VDS 2.10.1
Sensys Networks VSN240-T < VDS 2.10.1, < VDS 1.8.8, < TrafficDOT 2.10.3 VDS 2.10.1

Advisories 1

References