01 Record

CVE-2014-9408

Ekahau B4 staff badge tag 5.7 with firmware 1.4.52, Real-Time Location System (RTLS) Controller 6.0.5-FINAL, and Activator 3 uses part of the MAC address as part of the RC4 setup key, which makes it

UnratedPUBLISHEDCNA: mitre

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

Ekahau B4 staff badge tag 5.7 with firmware 1.4.52, Real-Time Location System (RTLS) Controller 6.0.5-FINAL, and Activator 3 uses part of the MAC address as part of the RC4 setup key, which makes it

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 2.24% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 82.3% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2014-12-19 15:00Z11 YR AGO

Last updated

2024-08-06 13:40Z2 YR AGO

Reserved

2014-12-19

Assigning CNA

mitre

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-200Exposure of Sensitive Information to an Unauthorized ActorClass

Data version

5.1

Document digest

c39d2af642955a9be2b377fb1cca8f63c1c5cdd1dea14fc22c35ab1d0b1506fa

05 Affected products

VendorProductVersionsPlatforms

ekahauactivatorNot specified—

ekahaub4_staff_badge_tagNot specified—

ekahaub4_staff_badge_tag_firmwareNot specified—

ekahaureal-time_location_system_controllerNot specified—

06 References

packetstormsecurity.comhttp://packetstormsecurity.com/files/129585/Ekahau-Real-Time-Location-System-RC4-Cipher-Stream-Reuse-Weak-Key-Derivation.htmlx_refsource_MISC
www.securityfocus.com71674http://www.securityfocus.com/bid/71674vdb-entryx_refsource_BID
www.modzero.chhttp://www.modzero.ch/advisories/MZ-14-01-Ekahau-RTLS.txtx_refsource_MISC
www.securityfocus.com20141215 Vulnerabilities in Ekahau Real-Time Location Tracking System [MZ-14-01]http://www.securityfocus.com/archive/1/534241/100/0/threadedmailing-listx_refsource_BUGTRAQ