CVE-2014-2362
OleumTech WIO Use of Cryptographically Weak Pseudo-Random Number Generator
OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules rely exclusively on a time value for entropy in key generation, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by predicting the time of project creation.
Exploit likelihood
What each source reports
CVE List Score used
OleumTech WIO Use of Cryptographically Weak Pseudo-Random Number Generator
OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules rely exclusively on a time value for entropy in key generation, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by predicting the time of project creation.
- Record
CVE-2014-2362- CVSS 2.0
- 7.8
AV:N/AC:M/Au:N/C:C/I:P/A:N - Weakness
- CWE-338
- Updated
- 2026-11-02
EUVDEUVD-2014-2399
OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules rely exclusively on a time value for entropy in key generation, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by predicting the time of project creation.
- Record
EUVD-2014-2399- CVSS 2.0
- 7.8 High
AV:N/AC:M/Au:N/C:C/I:P/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-prwj-528c-65r9 No score
OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules rely exclusively on a time...
OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules rely exclusively on a time value for entropy in key generation, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by predicting the time of project creation.
- Record
GHSA-prwj-528c-65r9- Weakness
- CWE-338
- Updated
- 2026-11-02
NVD
OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules rely exclusively on a time value for entropy in key generation, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by predicting the time of project creation.
- Record
CVE-2014-2362- CVSS 2.0
- 7.8 High
AV:N/AC:M/Au:N/C:C/I:P/A:N - Weakness
- CWE-338
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-2362 is a vulnerability (CVSS 7.8) in Oleumtech Sensor Wireless I/o Modules, published July 24, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.58%, the 75th percentile. No source names a fixed version.