CVE-2014-2362CWE-338

OleumTech WIO Use of Cryptographically Weak Pseudo-Random Number Generator

High · published July 24, 2014

CVSS v2.0
7.8
EPSS
2%
Percentile
75.1
In the wild
Unconfirmed
What it is

OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules rely exclusively on a time value for entropy in key generation, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by predicting the time of project creation.

The record
Technical detail
CVSS v2.0
7.8 · HIGH
Vector
AV:N/AC:M/Au:N/C:C/I:P/A:N
CVSS v4.0
Not supplied
EPSS
0.01576 · 75.1th percentile
Weakness
CWE-338 · Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
Published
2014-07-24T14:00Z
EPSS history
Timeline
  • 24 JUL 14:00Z
    OleumTech WIO Use of Cryptographically Weak Pseudo-Random Number Generator
    cvelistv5