CVE-2014-0761

CG Automation ePAQ-9410 Substation Gateway Improper Input Validation

CVSS 7.1 EPSS 2.0%CWE-20

Vexday Risk Score

21Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 7.1EPSS 2.0%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

28 Aug 2014Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

The DNP3 driver in CG Automation ePAQ-9410 Substation Gateway allows remote attackers to cause a denial of service (infinite loop or process crash) via a crafted TCP packet.

AV:N/AC:M/Au:N/C:N/I:N/A:C

Affected products

CG Automation · ePAQ-9410 Substation Gateway

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://mail.cgautomationusa.com/login.aspx https://ics-cert.us-cert.gov/advisories/ICSA-14-238-01 https://www.cisa.gov/news-events/ics-advisories/icsa-14-238-01