CVE-2014-2378
Sensys Networks VSN240-F and VSN240-T sensors VDS before 2.10.1 and TrafficDOT before 2.10.3 do not verify the integrity of downloaded updates, which allows remote attackers to execute arbitrary code via a Trojan horse update.
- Score
- CVSS 2.0 7.6 High
- Status
- Modified - ics-cert@hq.dhs.gov
- Published
- 2014-09-05
- Last modified
- 2025-10-13
- Weaknesses
- CWE-494, CWE-94
Affected products
- Vsn240-f (Sensys Networks)
- Vsn240-t (Sensys Networks)
- Trafficdot (Sensysnetworks)
- Vds (Sensysnetworks)
- Vsn240-f (Sensysnetworks)
- Vsn240-t (Sensysnetworks)
References
- http://www.sensysnetworks.com/distributors/
- http://www.sensysnetworks.com/resources-by-category/#sw
- https://www.cisa.gov/news-events/ics-advisories/icsa-14-247-01a
- https://ics-cert.us-cert.gov/advisories/ICSA-14-247-01
