CVE-2014-0762

CG Automation ePAQ-9410 Substation Gateway Improper Input Validation

CVSS 4.7 EPSS 0.3%CWE-20

The CG Automation Software DNP3 driver, used in the ePAQ-9410 Substation Gateway products, does not validate input correctly. An attacker could cause the software to go into an infinite loop, causing the process to crash. The system must be restarted manually to clear the condition.

AV:L/AC:M/Au:N/C:N/I:N/A:C

Affected products

CG Automation · ePAQ-9410 Substation Gateway

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://mail.cgautomationusa.com/login.aspx https://ics-cert.us-cert.gov/advisories/ICSA-14-238-01 https://www.cisa.gov/news-events/ics-advisories/icsa-14-238-01