Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2014-2378

Sensys Networks Traffic Sensor Download of Code Without Integrity Check

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

Sensys Networks VSN240-F and VSN240-T sensors VDS before 2.10.1 and TrafficDOT before 2.10.3 do not verify the integrity of downloaded updates, which allows remote attackers to execute arbitrary code via a Trojan horse update.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Sensys Networks VSN240-F

Default version status: unaffected

  • 0 to < VDS 2.10.1affected
  • 0 to < VDS 1.8.8affected
  • 0 to < TrafficDOT 2.10.3affected

Sensys Networks VSN240-T

Default version status: unaffected

  • 0 to < VDS 2.10.1affected
  • 0 to < VDS 1.8.8affected
  • 0 to < TrafficDOT 2.10.3affected

References