Triangle MicroWorks SCADA Data Gateway Resource Exhaustion
Summary
| CVE | CVE-2014-2343 |
|---|---|
| State | PUBLISHED |
| Assigner | icscert |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2014-05-30 23:55:02 UTC |
| Updated | 2026-05-06 22:30:45 UTC |
| Description | Triangle MicroWorks SCADA Data Gateway before 3.00.0635 allows physically proximate attackers to cause a denial of service (excessive data processing) via a crafted DNP request over a serial line. |
Risk And Classification
Primary CVSS: v2.0 2.1 from [email protected]
AV:L/AC:L/Au:N/C:N/I:N/A:P
Problem Types: CWE-400 | CWE-20 | CWE-400 CWE-400
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 2.0 | [email protected] | Primary | 2.1 | AV:L/AC:L/Au:N/C:N/I:N/A:P | |
| 2.0 | [email protected] | Secondary | 1.2 | AV:L/AC:H/Au:N/C:N/I:N/A:P | |
| 2.0 | CNA | CVSS | 1.2 | AV:L/AC:H/Au:N/C:N/I:N/A:P |
CVSS v2.0 Breakdown
Access Vector
LocalAccess Complexity
LowAuthentication
NoneConfidentiality
NoneIntegrity
NoneAvailability
PartialAV:L/AC:L/Au:N/C:N/I:N/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Trianglemicroworks | Scada Data Gateway | 2.50 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.50.0309 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.51 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.53 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0515 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0516 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0517 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0518 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0528 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0529 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0536 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0540 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0544 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0545 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0552 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0553 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0558 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0561 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0562 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0564 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0565 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0566 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0567 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0569 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0570 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0571 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0572 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0573 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0574 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0575 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0576 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0577 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0578 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0579 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0580 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0581 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0582 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0583 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0584 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0586 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0587 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0588 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0589 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0590 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0591 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0592 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0594 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0595 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0596 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0597 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0598 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 2.54.0599 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 3.00 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 3.00.0612 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 3.00.0615 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 3.00.0616 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | 3.00.0630 | All | All | All |
| Application | Trianglemicroworks | Scada Data Gateway | All | All | All | All |
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Triangle MicroWorks | SCADA Data Gateway | affected v3.00.0635 custom | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| www.cisa.gov/news-events/ics-advisories/icsa-14-149-01 | [email protected] | www.cisa.gov | |
| Triangle MicroWorks Uncontrolled Resource Consumption | ICS-CERT | af854a3a-2127-422b-91ae-364da2661108 | ics-cert.us-cert.gov | US Government Resource |
| What's New | af854a3a-2127-422b-91ae-364da2661108 | www.trianglemicroworks.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
Discovery Credit
CNA: Adam Crain of Automatak and Chris Sistrunk of Mandiant (en)
Additional Advisory Data
Solutions
CNA: Triangle MicroWorks has produced an update and release notes describing the mitigation. Please contact Triangle MicroWorks Support for details on specific platform updates here: http://www.trianglemicroworks.com/SupportPage.htm Release notes are found here: http://www.trianglemicroworks.com/products/scada-data-gateway/what%27s-new Triangle MicroWorks recommends following the International Electrotechnical Commission (IEC) Technical Specification TS 62351 to reduce the risk from vulnerability. More information on recommended implementation practices for Triangle MicroWorks products is available by contacting your product representative.
There are currently no legacy QID mappings associated with this CVE.