CVE-2014-0761

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

The DNP3 driver in CG Automation ePAQ-9410 Substation Gateway allows remote attackers to cause a denial of service (infinite loop or process crash) via a crafted TCP packet.

Metrics

CVSS 2.0 7.1/10AV:N/AC:M/Au:N/C:N/I:N/A:C

Weakness enumeration

CWE-20

Affected software

VendorProductVersions
CG AutomationePAQ-9410 Substation Gatewayall versions

References

Timeline

Published
Aug 28, 2014
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2014

CVE-2014-07624.7The CG Automation Software DNP3 driver, used in the ePAQ-9410 Substation Gateway products, does not validate input correctly. An attacker cCVE-2014-07637.5An attacker using SQL injection may use arguments to construct queries without proper sanitization. The DBVisitor.dll is exposed through SOCVE-2014-07647.5By providing an overly long string to the NodeName parameter, an attacker may be able to overflow the static stack buffer. The attacker maCVE-2014-07657.5To exploit this vulnerability, the attacker sends data from the GotoCmd argument to control. If the value of the argument is overly long, tCVE-2014-07667.5An attacker can exploit this vulnerability by copying an overly long NodeName2 argument into a statically sized buffer on the stack to oveCVE-2014-07677.5An attacker may exploit this vulnerability by passing an overly long value from the AccessCode argument to the control. This will overflow CVE-2014-07687.5An attacker may pass an overly long value from the AccessCode2 argument to the control to overflow the static stack buffer. The attacker maCVE-2014-07699.3The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion do not require autheCVE-2014-07707.5By providing an overly long string to the UserName parameter, an attacker may be able to overflow the static stack buffer. The attacker maCVE-2014-07715.0The BWOCXRUN.BwocxrunCtrl.1 control contains a method named “OpenUrlToBuffer.” This method takes a URL as a parameter and returns its contCVE-2014-07725.0The BWOCXRUN.BwocxrunCtrl.1 control contains a method named OpenUrlToBufferTimeout. This method takes a URL as a parameter and returns itsCVE-2014-07737.5The BWOCXRUN.BwocxrunCtrl.1 control contains a method named “CreateProcess.” This method contains validation to ensure an attacker cannot
CVE-2014-0761: High severity, CVSS 7.1 | Vulnix