{"api_version":"1","generated_at":"2026-07-23T09:36:03+00:00","cve":"CVE-2014-0762","urls":{"html":"https://cve.report/CVE-2014-0762","api":"https://cve.report/api/cve/CVE-2014-0762.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2014-0762","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2014-0762"},"summary":{"title":"CG Automation ePAQ-9410 Substation Gateway Improper Input Validation","description":"The CG Automation Software DNP3 driver, used in the ePAQ-9410 Substation\n Gateway products, does not validate input correctly. An attacker could \ncause the software to go into an infinite loop, causing the process to \ncrash. The system must be restarted manually to clear the condition.","state":"PUBLISHED","assigner":"icscert","published_at":"2014-08-28 01:55:03","updated_at":"2026-05-06 22:30:45"},"problem_types":["CWE-20","CWE-20 CWE-20"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.7","severity":"","vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","data":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","baseScore":4.7,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"}},{"version":"2.0","source":"ics-cert@hq.dhs.gov","type":"Secondary","score":"4.7","severity":"","vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","data":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","baseScore":4.7,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"}},{"version":"2.0","source":"CNA","type":"CVSS","score":"4.7","severity":"","vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","data":{"accessComplexity":"MEDIUM","accessVector":"LOCAL","authentication":"NONE","availabilityImpact":"COMPLETE","baseScore":4.7,"confidentialityImpact":"NONE","integrityImpact":"NONE","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","version":"2.0"}}],"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-14-238-01","name":"https://www.cisa.gov/news-events/ics-advisories/icsa-14-238-01","refsource":"ics-cert@hq.dhs.gov","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"http://mail.cgautomationusa.com/login.aspx","name":"http://mail.cgautomationusa.com/login.aspx","refsource":"ics-cert@hq.dhs.gov","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-14-238-01","name":"https://ics-cert.us-cert.gov/advisories/ICSA-14-238-01","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"],"title":"CG Automation Improper Input Validation | ICS-CERT","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0762","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0762","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"CG Automation","product":"ePAQ-9410 Substation Gateway","version":"affected all versions","platforms":[]}],"timeline":[],"solutions":[{"source":"CNA","title":"","value":"CG Automation has fixed this vulnerability with updated software. \nUsers may obtain the updated software by downloading from this web \naddress:  http://mail.cgautomationusa.com/login.aspx","time":"","lang":"en"}],"workarounds":[],"exploits":[],"credits":[{"source":"CNA","value":"Adam Crain of Automatak","lang":"en"},{"source":"CNA","value":"Chris Sistrunk of Mandiant","lang":"en"}],"nvd_cpes":[{"cve_year":"2014","cve_id":"762","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"qeiinc","cpe5":"epaq-9410_substation_gateway","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T09:27:19.483Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"https://ics-cert.us-cert.gov/advisories/ICSA-14-238-01"}],"title":"CVE Program Container"}],"cna":{"affected":[{"defaultStatus":"unaffected","product":"ePAQ-9410 Substation Gateway","vendor":"CG Automation","versions":[{"status":"affected","version":"all versions"}]}],"credits":[{"lang":"en","type":"finder","value":"Adam Crain of Automatak"},{"lang":"en","type":"finder","value":"Chris Sistrunk of Mandiant"}],"datePublic":"2014-08-26T06:00:00.000Z","descriptions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<p>\nThe CG Automation Software DNP3 driver, used in the ePAQ-9410 Substation\n Gateway products, does not validate input correctly. An attacker could \ncause the software to go into an infinite loop, causing the process to \ncrash. The system must be restarted manually to clear the condition.\n\n</p>"}],"value":"The CG Automation Software DNP3 driver, used in the ePAQ-9410 Substation\n Gateway products, does not validate input correctly. An attacker could \ncause the software to go into an infinite loop, causing the process to \ncrash. The system must be restarted manually to clear the condition."}],"metrics":[{"cvssV2_0":{"accessComplexity":"MEDIUM","accessVector":"LOCAL","authentication":"NONE","availabilityImpact":"COMPLETE","baseScore":4.7,"confidentialityImpact":"NONE","integrityImpact":"NONE","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","version":"2.0"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-20","description":"CWE-20","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2025-09-19T18:58:30.389Z","orgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","shortName":"icscert"},"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-14-238-01"},{"url":"http://mail.cgautomationusa.com/login.aspx"}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<p>CG Automation has fixed this vulnerability with updated software. \nUsers may obtain the updated software by downloading from this web \naddress:&nbsp;<a target=\"_blank\" rel=\"nofollow\" href=\"http://mail.cgautomationusa.com/login.aspx\">http://mail.cgautomationusa.com/login.aspx</a></p>\n\n<br>"}],"value":"CG Automation has fixed this vulnerability with updated software. \nUsers may obtain the updated software by downloading from this web \naddress:  http://mail.cgautomationusa.com/login.aspx"}],"source":{"advisory":"ICSA-14-238-01","discovery":"EXTERNAL"},"title":"CG Automation ePAQ-9410 Substation Gateway Improper Input Validation","x_generator":{"engine":"Vulnogram 0.2.0"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"ics-cert@hq.dhs.gov","ID":"CVE-2014-0761","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The DNP3 driver in CG Automation ePAQ-9410 Substation Gateway allows remote attackers to cause a denial of service (infinite loop or process crash) via a crafted TCP packet."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"https://ics-cert.us-cert.gov/advisories/ICSA-14-238-01","refsource":"MISC","url":"https://ics-cert.us-cert.gov/advisories/ICSA-14-238-01"}]}}}},"cveMetadata":{"assignerOrgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","assignerShortName":"icscert","cveId":"CVE-2014-0762","datePublished":"2014-08-28T01:00:00.000Z","dateReserved":"2014-01-02T00:00:00.000Z","dateUpdated":"2025-09-19T18:58:30.389Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2014-08-28 01:55:03","lastModifiedDate":"2026-05-06 22:30:45","problem_types":["CWE-20","CWE-20 CWE-20"],"metrics":{"cvssMetricV2":[{"source":"ics-cert@hq.dhs.gov","type":"Secondary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","baseScore":4.7,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","baseScore":4.7,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:qeiinc:epaq-9410_substation_gateway:-:*:*:*:*:*:*:*","matchCriteriaId":"D6CF7480-D726-4929-A718-00C7D71A0FDA"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2014","CveId":"762","Ordinal":"1","Title":"CG Automation ePAQ-9410 Substation Gateway Improper Input Valida","CVE":"CVE-2014-0762","Year":"2014"},"notes":[{"CveYear":"2014","CveId":"762","Ordinal":"1","NoteData":"The CG Automation Software DNP3 driver, used in the ePAQ-9410 Substation\n Gateway products, does not validate input correctly. An attacker could \ncause the software to go into an infinite loop, causing the process to \ncrash. The system must be restarted manually to clear the condition.","Type":"Description","Title":"CG Automation ePAQ-9410 Substation Gateway Improper Input Valida"},{"CveYear":"2014","CveId":"762","Ordinal":"2","NoteData":"2014-08-27","Type":"Other","Title":"Published"},{"CveYear":"2014","CveId":"762","Ordinal":"3","NoteData":"2014-08-27","Type":"Other","Title":"Modified"}]}}}