CVE-2014-9196
Eaton Cooper Power Systems ProView 4.0 and 5.0 before 5.0 11 on Form 6 controls and Idea and IdeaPLUS relays generates TCP initial sequence number (ISN) values linearly, which makes it easier for remote attackers to spoof TCP sessions by predicting an ISN value.
- Score
- CVSS 2.0 9.3 Critical
- Status
- Modified - ics-cert@hq.dhs.gov
- Published
- 2015-07-20
- Last modified
- 2025-09-05
- Weaknesses
- CWE-254, CWE-342
Affected products
- Proview (Eaton)
- Ideaideaplus Relays (Eatons Cooper Power Systems)
- Series Form 6 (Eatons Cooper Power Systems)
References
- http://www.securityfocus.com/bid/75936
- https://www.cisa.gov/news-events/ics-advisories/icsa-15-006-01
- https://www.eaton.com/cybersecurity
- https://ics-cert.us-cert.gov/advisories/ICSA-15-006-01
