CVE-2014-2361 Information

Description

OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules when BreeZ is used do not require authentication for reading the site security key which allows physically proximate attackers to spoof communication by obtaining this key after use of direct hardware access or manual-setup mode.

Reference

http://ics-cert.us-cert.gov/advisories/ICSA-14-202-01 http://www.securityfocus.com/bid/68795

Share on: