Sign-up

ID

VAR-201407-0229


CVE

CVE-2014-2360


TITLE

OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Module Vulnerable to arbitrary code execution

Trust: 0.8

sources: JVNDB: JVNDB-2014-003555

DESCRIPTION

OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules allow remote attackers to execute arbitrary code via packets that report a high battery voltage. OleumTech is a California company that provides wireless remote monitoring equipment for industrial environments. OleumTech WIO DH2 Wireless Gateway is prone to a remote denial-of-service vulnerability. Successful exploits may allow an attacker to cause an affected device to crash, resulting in a denial-of-service condition. OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules are both products of OleumTech Corporation in the United States

Trust: 2.52

sources: NVD: CVE-2014-2360 // JVNDB: JVNDB-2014-003555 // CNVD: CNVD-2014-04599 // BID: 68797 // VULHUB: VHN-70299

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

category:['network device']sub_category:gateway

Trust: 0.1

sources: OTHER: None // CNVD: CNVD-2014-04599

AFFECTED PRODUCTS

vendor:oleumtechmodel:sensor wireless i\/o modulescope:eqversion: -

Trust: 1.6

vendor:oleumtechmodel:wio dh2 wireless gatewayscope:eqversion: -

Trust: 1.6

vendor:oleumtechmodel:wio dh2 wireless gatewayscope: - version: -

Trust: 1.4

vendor:oleumtechmodel:sensor wireless i/o modulescope: - version: -

Trust: 0.8

vendor:oleumtechmodel:sensor wireless i/o modulesscope: - version: -

Trust: 0.6

sources: CNVD: CNVD-2014-04599 // CNNVD: CNNVD-201407-592 // JVNDB: JVNDB-2014-003555 // NVD: CVE-2014-2360

CVSS

SEVERITY

CVSSV2

CVSSV3

ics-cert@hq.dhs.gov: CVE-2014-2360
value: MEDIUM

Trust: 1.0

nvd@nist.gov: CVE-2014-2360
value: HIGH

Trust: 1.0

NVD: CVE-2014-2360
value: HIGH

Trust: 0.8

CNVD: CNVD-2014-04599
value: MEDIUM

Trust: 0.6

CNNVD: CNNVD-201407-592
value: HIGH

Trust: 0.6

VULHUB: VHN-70299
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2014-2360
severity: HIGH
baseScore: 7.5
vectorString: AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

ics-cert@hq.dhs.gov: CVE-2014-2360
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.0

CNVD: CNVD-2014-04599
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

VULHUB: VHN-70299
severity: HIGH
baseScore: 7.5
vectorString: AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: CNVD: CNVD-2014-04599 // VULHUB: VHN-70299 // CNNVD: CNNVD-201407-592 // JVNDB: JVNDB-2014-003555 // NVD: CVE-2014-2360 // NVD: CVE-2014-2360

PROBLEMTYPE DATA

problemtype:CWE-20

Trust: 1.9

sources: VULHUB: VHN-70299 // JVNDB: JVNDB-2014-003555 // NVD: CVE-2014-2360

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201407-592

TYPE

input validation

Trust: 0.6

sources: CNNVD: CNNVD-201407-592

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2014-003555

PATCH
title:Wireless I/O Modulesurl:http://www.oleumtech.com/index.php?section=product&subsection=product_category&category_id=30
Trust: 0.8
title:OleumTech WIO DH2 Wireless Gatewayurl:http://www.ogesc.com/pdfs/OleumTech/6_dh2-wireless-gateway-datasheet.pdf
Trust: 0.8
sources:
            
            
            JVNDB: JVNDB-2014-003555

EXTERNAL IDS
db:NVDid:CVE-2014-2360
Trust: 3.5
db:ICS CERTid:ICSA-14-202-01
Trust: 3.1
db:BIDid:68797
Trust: 2.0
db:ICS CERTid:ICSA-14-202-01A
Trust: 1.0
db:JVNDBid:JVNDB-2014-003555
Trust: 0.8
db:CNVDid:CNVD-2014-04599
Trust: 0.6
db:CNNVDid:CNNVD-201407-592
Trust: 0.6
db:OTHERid:NONE
Trust: 0.1
db:VULHUBid:VHN-70299
Trust: 0.1
sources:
            
            
            OTHER: None // 
            
            
            
            CNVD: CNVD-2014-04599 // 
            
            
            
            VULHUB: VHN-70299 // 
            
            
            
            BID: 68797 // 
            
            
            
            CNNVD: CNNVD-201407-592 // 
            
            
            
            JVNDB: JVNDB-2014-003555 // 
            
            
            
            NVD: CVE-2014-2360

REFERENCES
url:http://ics-cert.us-cert.gov/advisories/icsa-14-202-01
Trust: 3.1
url:http://www.securityfocus.com/bid/68797
Trust: 1.1
url:https://www.cisa.gov/news-events/ics-advisories/icsa-14-202-01a
Trust: 1.0
url:http://support.oleumtech.com/
Trust: 1.0
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2014-2360
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2014-2360
Trust: 0.8
url:https://ieeexplore.ieee.org/abstract/document/10769424
Trust: 0.1
sources:
            
            
            OTHER: None // 
            
            
            
            CNVD: CNVD-2014-04599 // 
            
            
            
            VULHUB: VHN-70299 // 
            
            
            
            CNNVD: CNNVD-201407-592 // 
            
            
            
            JVNDB: JVNDB-2014-003555 // 
            
            
            
            NVD: CVE-2014-2360

CREDITS
Lucas Apa and Carlos Mario Penagos Hollman of IOActive
Trust: 0.3
sources:
            
            
            BID: 68797

SOURCES
db:OTHERid: - 
db:CNVDid:CNVD-2014-04599
db:VULHUBid:VHN-70299
db:BIDid:68797
db:CNNVDid:CNNVD-201407-592
db:JVNDBid:JVNDB-2014-003555
db:NVDid:CVE-2014-2360

LAST UPDATE DATE
2025-10-09T20:01:54.096000+00:00

SOURCES UPDATE DATE
db:CNVDid:CNVD-2014-04599date:2014-07-25T00:00:00
db:VULHUBid:VHN-70299date:2016-11-28T00:00:00
db:BIDid:68797date:2015-07-15T00:10:00
db:CNNVDid:CNNVD-201407-592date:2014-07-29T00:00:00
db:JVNDBid:JVNDB-2014-003555date:2014-07-25T00:00:00
db:NVDid:CVE-2014-2360date:2025-10-06T18:15:47.220

SOURCES RELEASE DATE
db:CNVDid:CNVD-2014-04599date:2014-07-25T00:00:00
db:VULHUBid:VHN-70299date:2014-07-24T00:00:00
db:BIDid:68797date:2014-07-21T00:00:00
db:CNNVDid:CNNVD-201407-592date:2014-07-29T00:00:00
db:JVNDBid:JVNDB-2014-003555date:2014-07-25T00:00:00
db:NVDid:CVE-2014-2360date:2014-07-24T14:55:07.143