CVE-2014-0762

The CG Automation Software DNP3 driver, used in the ePAQ-9410 Substation Gateway products, does not validate input correctly. An attacker could cause the software to go into an infinite loop, causing the process to crash. The system must be restarted manually to clear the condition.

Score

CVSS 2.0 4.7 Medium

Status

Modified - ics-cert@hq.dhs.gov

Published

2014-08-28

Last modified

2025-09-19

Weaknesses

CWE-20

Affected products

• Epaq-9410 Substation Gateway (Cg Automation)
• Epaq-9410 Substation Gateway (Qeiinc)

References

• http://mail.cgautomationusa.com/login.aspx
• https://www.cisa.gov/news-events/ics-advisories/icsa-14-238-01
• https://ics-cert.us-cert.gov/advisories/ICSA-14-238-01