CVEvulnerability
CVE-2014-0762
4.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-08-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.7 MEDIUM — AV:L/AC:M/Au:N/C:N/I:N/A:C
- CVSS 2.0 ([email protected])
- 4.7 MEDIUM — AV:L/AC:M/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-20
Description
The CG Automation Software DNP3 driver, used in the ePAQ-9410 Substation
Gateway products, does not validate input correctly. An attacker could
cause the software to go into an infinite loop, causing the process to
crash. The system must be restarted manually to clear the condition.
Affected configurations
• qeiinc epaq-9410 substation gateway
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://mail.cgautomationusa.com/login.aspx mail.cgautomationusa.com
- https://www.cisa.gov/news-events/ics-advisories/icsa-14-238-01 www.cisa.gov
- https://ics-cert.us-cert.gov/advisories/ICSA-14-238-01 US Government Resource