CVE-2014-2360

CVE-2014-2360 describes a critical vulnerability in OleumTech WIO DH2 Wireless Gateways and Sensor Wireless I/O Modules, allowing remote attackers to execute arbitrary code. This is achieved by sending specially crafted packets that report an unusually high battery voltage, indicating a lack of proper input validation (CWE-20). With a CVSS score of 7.5, this vulnerability is highly severe, as it can be exploited remotely without authentication (AV:N/Au:N) with low attack complexity (AC:L), potentially leading to partial compromise of confidentiality, integrity, and availability (C:P/I:P/A:P). Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage, suggesting it is not widely known or targeted.