VulnerabilityModified

CVE-2014-0762

An attacker could cause the software to go into an infinite loop, causing the process to crash.

MEDIUM 4.7EPSS 0.34%

Does this matter?

Lower severity and a low EPSS score (0.34%). Track it; it rarely justifies an emergency change on its own.

Description

The CG Automation Software DNP3 driver, used in the ePAQ-9410 Substation Gateway products, does not validate input correctly. An attacker could cause the software to go into an infinite loop, causing the process to crash. The system must be restarted manually to clear the condition.

CVSS 2.0: 4.7 MEDIUMAV:L/AC:M/Au:N/C:N/I:N/A:C
EPSS: 0.34% probability · 27th percentile
CISA KEV: Not listed
Weakness: CWE-20
Affected: qeiinc/epaq-9410 substation gateway
Source: ics-cert@hq.dhs.gov

References

http://mail.cgautomationusa.com/login.aspx
https://www.cisa.gov/news-events/ics-advisories/icsa-14-238-01
https://ics-cert.us-cert.gov/advisories/ICSA-14-238-01US Government Resource

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.