Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2014-2379

Sensys Networks Traffic Sensor Missing Encryption of Sensitive Data

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

Sensys Networks VSN240-F and VSN240-T sensors VDS before 2.10.1 and TrafficDOT before 2.10.3 do not use encryption, which allows remote attackers to interfere with traffic control by replaying transmissions on a wireless network.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Sensys Networks VSN240-F

Default version status: unaffected

  • 0 to < VDS 2.10.1affected
  • 0 to < VDS 1.8.8affected
  • 0 to < TrafficDOT 2.10.3affected

Sensys Networks VSN240-T

Default version status: unaffected

  • 0 to < VDS 2.10.1affected
  • 0 to < VDS 1.8.8affected
  • 0 to < TrafficDOT 2.10.3affected

References