CVE-2014-0762

CG Automation ePAQ-9410 Substation Gateway Improper Input Validation

State: Published
Severity: 4.7 Medium
Published: Aug 28, 2014
Updated: Sep 19, 2025
Reserved: Jan 2, 2014

Description

The CG Automation Software DNP3 driver, used in the ePAQ-9410 Substation Gateway products, does not validate input correctly. An attacker could cause the software to go into an infinite loop, causing the process to crash. The system must be restarted manually to clear the condition.

Scores

CVSS	Score	Vector	Source
2.0	4.7 Medium	AV:L/AC:M/Au:N/C:N/I:N/A:C	icscert

Weaknesses

CWE-20

Affected Products

Product	Versions
ePAQ-9410 Substation GatewayCG Automation	all versionsAffected

References

https://www.cisa.gov/news-events/ics-advisories/icsa-14-238-01
http://mail.cgautomationusa.com/login.aspx
https://ics-cert.us-cert.gov/advisories/ICSA-14-238-01

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.