CVE-2014-2362

CVE-2014-2362: OleumTech WIO Use of Cryptographically Weak Pseudo-Random Number Generator

Vendor Oleumtech
Product WIO DH2 Wireless Gateway
Weakness CWE-338
Published July 24, 2014
Last update October 6, 2025
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules rely exclusively on a time value for entropy in key generation, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by predicting the time of project creation.

Key dates

02Disclosure timeline

July 24, 2014 CVE published
October 6, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-40916 Mojolicious::Plugin::CaptchaPNG version 1.05 for Perl uses a weak random number source for generating the captcha text CVE-2023-45237 Use of a Weak PseudoRandom Number Generator in EDK II Network Package CVE-2023-2884 Insecure Randomness in CBOT's Chatbot CVE-2024-57854 Net::NSCA::Client versions through 0.009002 for Perl uses a poor random number generator CVE-2024-58135 Mojolicious versions from 7.28 through 9.45 for Perl will generate weak HMAC session cookie secrets via "mojo generate app" by default