CVE-2014-2362 - CVE House
Back to Database
Status published High CVE-2014-2362

OleumTech WIO Use of Cryptographically Weak Pseudo-Random Number Generator

Vulnerability Description

OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules rely exclusively on a time value for entropy in key generation, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by predicting the time of project creation.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-2362

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Lucas Apa and Carlos Mario Penagos Hollman of IOActive

References

More from OleumTech

View All →
CVE-2014-2361
OleumTech WIO Family Key Management Errors
High 7.2
CVE-2014-2360
OleumTech WIO Family Improper Input Validation
Medium 5

Affected Vendor

Affected Software

WIO DH2 Wireless Gateway, Sensor Wireless I/O Modules
Vulnerable Versions:
All versions

Timeline

Official Publish: July 24th, 2014
Last Modified: October 6th, 2025
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-338

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.