CVE-2014-2716

CVE-2014-2716 describes a vulnerability in Ekahau B4 staff badge tags (firmware 1.4.52), RTLS Controller (6.0.5-FINAL), and Activator 3, where the RC4 cipher stream is reused. This flaw allows remote attackers to potentially decrypt plaintext messages by performing an XOR operation on two ciphertexts. With a CVSS score of 4.3 (medium severity), this vulnerability has a network attack vector and medium attack complexity, leading to a potential compromise of confidentiality. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.