CVE-2014-2361 - CVE House
Back to Database
Status published High CVE-2014-2361

OleumTech WIO Family Key Management Errors

Vulnerability Description

OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules, when BreeZ is used, do not require authentication for reading the site security key, which allows physically proximate attackers to spoof communication by obtaining this key after use of direct hardware access or manual-setup mode.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-2361

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Lucas Apa and Carlos Mario Penagos Hollman of IOActive

References

More from OleumTech

View All →
CVE-2014-2362
OleumTech WIO Use of Cryptographically Weak Pseudo-Random Number Generator
High 7.8
CVE-2014-2360
OleumTech WIO Family Improper Input Validation
Medium 5

Affected Vendor

Affected Software

WIO DH2 Wireless Gateway, Sensor Wireless I/O Modules
Vulnerable Versions:
All versions

Timeline

Official Publish: July 24th, 2014
Last Modified: October 6th, 2025
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-320

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.