Improper input validation in Cg Automation Epaq-9410 Substation Gateway

CVE-2014-0762

The CG Automation Software DNP3 driver, used in the ePAQ-9410 Substation Gateway products, does not validate input correctly. An attacker could cause the software to go into an infinite loop, causing the process to crash. The system must be restarted manually to clear the condition.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.003 (26.7th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

Public proof-of-concept exploits

References

Frequently asked questions

What is CVE-2014-0762?
CVE-2014-0762 is a vulnerability in Cg Automation Epaq-9410 Substation Gateway, classified under Improper Input Validation. Published 2014-08-28.
Is CVE-2014-0762 known to be exploited?
1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.