CVE-2014-2378CWE-494

Sensys Networks Traffic Sensor Download of Code Without Integrity Check

Medium · published September 5, 2014

CVSS v2.0
6.5
EPSS
1%
Percentile
58.9
In the wild
Unconfirmed
What it is

Sensys Networks VSN240-F and VSN240-T sensors VDS before 2.10.1 and TrafficDOT before 2.10.3 do not verify the integrity of downloaded updates, which allows remote attackers to execute arbitrary code via a Trojan horse update.

The record
Technical detail
CVSS v2.0
6.5 · MEDIUM
Vector
AV:A/AC:H/Au:N/C:C/I:C/A:P
CVSS v4.0
Not supplied
EPSS
0.00897 · 58.9th percentile
Weakness
CWE-494 · Download of Code Without Integrity Check
Published
2014-09-05T17:00Z
EPSS history
Timeline
  • 05 SEP 17:00Z
    Sensys Networks Traffic Sensor Download of Code Without Integrity Check
    cvelistv5