RCE in Sensys Networks Vsn240-F
CVE-2014-2378
Sensys Networks VSN240-F and VSN240-T sensors VDS before 2.10.1 and TrafficDOT before 2.10.3 do not verify the integrity of downloaded updates, which allows remote attackers to execute arbitrary code via a Trojan horse update.
EPSS: 0.009 (55.9th percentile) — read the EPSS interpretation.
Affected products
- Sensys Networks Vsn240-f — versions 0
- Sensys Networks Vsn240-t — versions 0
- Sensysnetworks Trafficdot — versions 2.8.3, 2.10.0, 2.10.1
- Sensysnetworks Vds — versions 1.8.5, 1.8.7, 2.6.3
- Sensysnetworks Vsn240-f
- Sensysnetworks Vsn240-t
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov
- ics-cert@hq.dhs.gov
- ics-cert@hq.dhs.gov
- af854a3a-2127-422b-91ae-364da2661108 (US Government Resource)