CVE-2014-2361
OleumTech WIO Family Key Management Errors
- Published
- Updated
- Reserved
- Assigned by
- icscert
Description
OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules, when BreeZ is used, do not require authentication for reading the site security key, which allows physically proximate attackers to spoof communication by obtaining this key after use of direct hardware access or manual-setup mode.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| icscertCNA (assigner) | 2.0 | High7.2 | AV:L/AC:L/Au:N/C:C/I:C/A:C |
| NVDNVD · Modified | 2.0 | High7.2 | AV:L/AC:L/Au:N/C:C/I:C/A:C |
- EPSS (exploitation in 30 days)
- 0.40% · top 65% of all CVEs (5 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.2.
Weakness
Affected products
OleumTech · WIO DH2 Wireless Gateway
- affected All versions
OleumTech · Sensor Wireless I/O Modules
- affected All versions
What to do
Solution: OleumTech has created updates for both BreeZ and the gateway to mitigate all these vulnerabilities. These updates allow users to encrypt their wireless traffic with AES256. To obtain these updates, please log in to the OleumTech download center ( http://support.oleumtech.com/ ) or contact OleumTech tech support:Phone: 866-508-8586 Email: [email protected]
References (5)
- 68797 (opens in a new tab)vdb-entryx_refsource_BID
- https://www.cisa.gov/news-events/ics-advisories/icsa-14-202-01a (opens in a new tab)
- http://support.oleumtech.com/ (opens in a new tab)
- http://ics-cert.us-cert.gov/advisories/ICSA-14-202-01 (opens in a new tab)x_refsource_MISCx_transferred
- 68795 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2014-2361)Record last updated .