CVE-2014-2378

HIGH 7.6CVE-2014-2378 · Published 05/09/2014 · updated 17/06/2026

In short

CVE-2014-2378 is a HIGH (CVSS 7.6) vulnerability affecting trafficdot (sensysnetworks), vds (sensysnetworks).
Chance of exploitation in the next 30 days (EPSS): 0.90%, higher than 59.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
trafficdot sensysnetworks	`= 2.10.0= 2.10.1= 2.8.3≤ 2.10.2`	No fix yet
vds sensysnetworks	`= 1.8.5= 1.8.7= 2.6.3= 2.6.4≤ 2.10.0`	No fix yet

Description

Sensys Networks VSN240-F and VSN240-T sensors VDS before 2.10.1 and TrafficDOT before 2.10.3 do not verify the integrity of downloaded updates, which allows remote attackers to execute arbitrary code via a Trojan horse update.

References

sensysnetworks.com/distributors
sensysnetworks.com/resources-by-category
cisa.gov/news-events/ics-advisories/icsa-14-247-01a
ics-cert.us-cert.gov/advisories/ICSA-14-247-01 · US Government Resource

More vulnerabilities in trafficdot

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free