What’s Vulnerable › Vulnerabilities

CVE-2014-2361: OleumTech WIO Family Key Management Errors

• Severity: high (CVSS 7.2 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-07-24 · updated 2026-06-17
• Weakness: CWE-320

Description

OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules, when BreeZ is used, do not require authentication for reading the site security key, which allows physically proximate attackers to spoof communication by obtaining this key after use of direct hardware access or manual-setup mode.

Affected products

• OleumTech Sensor Wireless I/O Module: all versions
• OleumTech WIO DH2 Wireless Gateway: all versions

References

• http://support.oleumtech.com/
• http://www.securityfocus.com/bid/68797
• https://www.cisa.gov/news-events/ics-advisories/icsa-14-202-01a
• http://ics-cert.us-cert.gov/advisories/ICSA-14-202-01
• http://www.securityfocus.com/bid/68795

Get alerted when CVE-2014-2361 or the next vulnerability affects your stack