CVE-2014-2378
Sensys Networks Traffic Sensor Download of Code Without Integrity Check
Sensys Networks VSN240-F and VSN240-T sensors VDS before 2.10.1 and TrafficDOT before 2.10.3 do not verify the integrity of downloaded updates, which allows remote attackers to execute arbitrary code via a Trojan horse update.
Exploit likelihood
What each source reports
CVE List Score used
Sensys Networks Traffic Sensor Download of Code Without Integrity Check
Sensys Networks VSN240-F and VSN240-T sensors VDS before 2.10.1 and TrafficDOT before 2.10.3 do not verify the integrity of downloaded updates, which allows remote attackers to execute arbitrary code via a Trojan horse update.
- Record
CVE-2014-2378- CVSS 2.0
- 6.5
AV:A/AC:H/Au:N/C:C/I:C/A:P - Weakness
- CWE-494
- Updated
- 2026-11-02
EUVDEUVD-2014-2415
Sensys Networks VSN240-F and VSN240-T sensors VDS before 2.10.1 and TrafficDOT before 2.10.3 do not verify the integrity of downloaded updates, which allows remote attackers to execute arbitrary code via a Trojan horse update.
- Record
EUVD-2014-2415- CVSS 2.0
- 6.5 Medium
AV:A/AC:H/Au:N/C:C/I:C/A:P - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-rpj9-vvgv-g3hf No score
Sensys Networks VSN240-F and VSN240-T sensors VDS before 2.10.1 and TrafficDOT before 2.10.3 do...
Sensys Networks VSN240-F and VSN240-T sensors VDS before 2.10.1 and TrafficDOT before 2.10.3 do not verify the integrity of downloaded updates, which allows remote attackers to execute arbitrary code via a Trojan horse update.
- Record
GHSA-rpj9-vvgv-g3hf- Weakness
- CWE-94, CWE-494
- Updated
- 2026-11-02
NVD
Sensys Networks VSN240-F and VSN240-T sensors VDS before 2.10.1 and TrafficDOT before 2.10.3 do not verify the integrity of downloaded updates, which allows remote attackers to execute arbitrary code via a Trojan horse update.
- Record
CVE-2014-2378- CVSS 2.0
- 6.5 Medium
AV:A/AC:H/Au:N/C:C/I:C/A:P - CVSS 2.0
- 7.6 High
AV:A/AC:M/Au:N/C:C/I:C/A:P - Weakness
- CWE-494, CWE-94
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-2378 is a vulnerability (CVSS 6.5) in Sensys Networks Vsn240-f, published September 5, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.90%, the 59th percentile. No source names a fixed version.