Improper input validation in Cg Automation Epaq-9410 Substation Gateway
CVE-2014-0762
The CG Automation Software DNP3 driver, used in the ePAQ-9410 Substation Gateway products, does not validate input correctly. An attacker could cause the software to go into an infinite loop, causing the process to crash. The system must be restarted manually to clear the condition.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.003 (26.7th percentile) — read the EPSS interpretation.
Affected products
- Cg Automation Epaq-9410 Substation Gateway — versions all versions
- Qeiinc Epaq-9410_substation_gateway
Weakness classification (CWE)
Public proof-of-concept exploits
References
- ics-cert@hq.dhs.gov
- ics-cert@hq.dhs.gov
- af854a3a-2127-422b-91ae-364da2661108 (US Government Resource)
Frequently asked questions
- What is CVE-2014-0762?
- CVE-2014-0762 is a vulnerability in Cg Automation Epaq-9410 Substation Gateway, classified under Improper Input Validation. Published 2014-08-28.
- Is CVE-2014-0762 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.