CVEvulnerability

CVE-2014-9196

9.3 HIGH Published 2015-07-20 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-07-20
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.6 HIGH — AV:N/AC:H/Au:N/C:C/I:C/A:C
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-254, CWE-342

Description

Eaton Cooper Power Systems ProView 4.0 and 5.0 before 5.0 11 on Form 6 controls and Idea and IdeaPLUS relays generates TCP initial sequence number (ISN) values linearly, which makes it easier for remote attackers to spoof TCP sessions by predicting an ISN value.

Affected configurations

• eaton proview 4.0 • eaton proview 5.0 • eaton proview 5.0.1 • eaton proview 5.0.2 • eaton proview 5.0.3 • eaton proview 5.0.4 • eaton proview 5.0.5 • eaton proview 5.0.6 • eaton proview 5.0.7 • eaton proview 5.0.8 • eaton proview 5.0.9 • eaton proview 5.0.10

Related

Weakness · not in database (1)

Weakness · CWE (1)

  • CWE-342 Predictable Exact Value from Previous Values weakness

References