4.7
CVE-2014-0762
- EPSS 0.08%
- Veröffentlicht 28.08.2014 01:55:03
- Zuletzt bearbeitet 19.09.2025 19:15:37
- Quelle ics-cert@hq.dhs.gov
- CVE-Watchlists
- Unerledigt
The CG Automation Software DNP3 driver, used in the ePAQ-9410 Substation Gateway products, does not validate input correctly. An attacker could cause the software to go into an infinite loop, causing the process to crash. The system must be restarted manually to clear the condition.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qeiinc ≫ Epaq-9410 Substation Gateway Version-
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.08% | 0.246 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.7 | 3.4 | 6.9 |
AV:L/AC:M/Au:N/C:N/I:N/A:C
|
| ics-cert@hq.dhs.gov | 4.7 | 3.4 | 6.9 |
AV:L/AC:M/Au:N/C:N/I:N/A:C
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.