medium6.5
CVE-2014-2378
Sensys Networks VSN240-F and VSN240-T sensors VDS before 2.10.1 and TrafficDOT before 2.10.3 do not verify the integrity of downloaded updates, which allows re…
Impact
Sensys Networks VSN240-F and VSN240-T sensors VDS before 2.10.1 and TrafficDOT before 2.10.3 do not verify the integrity of downloaded updates, which allows remote attackers to execute arbitrary code via a Trojan horse update.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sensysnetworks | Trafficdot | through 2.10.2 Versions 2.8.3, 2.10.0, 2.10.1 |
| Sensysnetworks | Vsn240-F | All versions |
| Sensysnetworks | Vsn240-T | All versions |
| Sensysnetworks | Vds | through 2.10.0 Versions 1.8.5, 1.8.7, 2.6.3, 2.6.4 |