CVE-2014-2716 in Real-Time Location System

Riassunto

di MITRE

Ekahau B4 staff badge tag 5.7 with firmware 1.4.52, Real-Time Location System (RTLS) Controller 6.0.5-FINAL, and Activator 3 reuses the RC4 cipher stream, which makes it easier for remote attackers to obtain plaintext messages via an XOR operation on two ciphertexts.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Prenotare: 01/04/2014
• Divulgazione: 19/12/2014
• Moderazione: accettato
• Voce: VDB-12791
• CPE: pronto
• CWE: CWE-310 (confermato)
• CVSS: 4.3 (NVD)
• EPSS: 0.01360
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-2716
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-2716
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-2716/