What is the CVSS score of CVE-2014-2379?

CVE-2014-2379 has a CVSS 2.0 base score of 4.3 (Medium). CVSS vector: AV:A/AC:H/Au:N/C:P/I:P/A:P. EPSS exploitation probability: 0.0%.

Trafficdot CVE-2014-2379

MEDIUM

Missing Encryption of Sensitive Data (CWE-311)

2014-09-05 ics-cert@hq.dhs.gov

Information Disclosure Trafficdot Vsn240 F Vsn240 T Vds

4.3

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

4.3 MEDIUM

AV:A/AC:H/Au:N/C:P/I:P/A:P

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:A/AC:H/Au:N/C:P/I:P/A:P

Attack Vector

Adjacent

Attack Complexity

High

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Sep 05, 2014 - 17:55 cve.org

MEDIUM 4.3

DescriptionCVE.org

Sensys Networks VSN240-F and VSN240-T sensors VDS before 2.10.1 and TrafficDOT before 2.10.3 do not use encryption, which allows remote attackers to interfere with traffic control by replaying transmissions on a wireless network.

AnalysisAI

Technical ContextAI

This vulnerability is classified under CWE-311. Sensys Networks VSN240-F and VSN240-T sensors VDS before 2.10.1 and TrafficDOT before 2.10.3 do not use encryption, which allows remote attackers to interfere with traffic control by replaying transmissions on a wireless network. Affected products include: Sensysnetworks Trafficdot, Sensysnetworks Vsn240-F, Sensysnetworks Vsn240-T, Sensysnetworks Vds. Version information: before 2.10.1.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.