CVE-2014-2716 in Real-Time Location System

सारांश

द्वारा MITRE

Ekahau B4 staff badge tag 5.7 with firmware 1.4.52, Real-Time Location System (RTLS) Controller 6.0.5-FINAL, and Activator 3 reuses the RC4 cipher stream, which makes it easier for remote attackers to obtain plaintext messages via an XOR operation on two ciphertexts.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• आरक्षित करना: 01/04/2014
• प्रकटीकरण: 19/12/2014
• संयम: स्वीकृत
• प्रविष्टि: VDB-12791
• CPE: तैयार
• CWE: CWE-310 (पुष्टि की गई)
• CVSS: 4.3 (NVD)
• EPSS: 0.01360
• KEV: नहीं
• गतिविधियाँ: बहुत कम

स्रोत

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-2716
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-2716
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-2716/