Every CVE Search/ Get API key

CVE-2014-0762

CG Automation ePAQ-9410 Substation Gateway Improper Input Validation

4.7

The CG Automation Software DNP3 driver, used in the ePAQ-9410 Substation Gateway products, does not validate input correctly. An attacker could cause the software to go into an infinite loop, causing the process to crash. The system must be restarted manually to clear the condition.

Exploit likelihood

0.34%Down 0.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

CVE List Score used 4.7

CG Automation ePAQ-9410 Substation Gateway Improper Input Validation

The CG Automation Software DNP3 driver, used in the ePAQ-9410 Substation Gateway products, does not validate input correctly. An attacker could cause the software to go into an infinite loop, causing the process to crash. The system must be restarted manually to clear the condition.

Record
CVE-2014-0762
CVSS 2.0
4.7 AV:L/AC:M/Au:N/C:N/I:N/A:C
Weakness
CWE-20
Updated
2026-11-02
EUVDEUVD-2014-0793 4.7

The CG Automation Software DNP3 driver, used in the ePAQ-9410 Substation Gateway products, does not validate input correctly. An attacker could cause the software to go into an infinite loop, causing the process to crash. The system must be restarted manually to clear the condition.

Record
EUVD-2014-0793
CVSS 2.0
4.7 MediumAV:L/AC:M/Au:N/C:N/I:N/A:C
Updated
2026-11-02
GitHub AdvisoriesGHSA-fv3c-2w3v-8v8j No score

The DNP3 driver in CG Automation ePAQ-9410 Substation Gateway allows physically proximate...

The DNP3 driver in CG Automation ePAQ-9410 Substation Gateway allows physically proximate attackers to cause a denial of service (infinite loop or process crash) via crafted input over a serial line.

Record
GHSA-fv3c-2w3v-8v8j
Weakness
CWE-20
Updated
2026-11-02
NVD 4.7

The CG Automation Software DNP3 driver, used in the ePAQ-9410 Substation Gateway products, does not validate input correctly. An attacker could cause the software to go into an infinite loop, causing the process to crash. The system must be restarted manually to clear the condition.

Record
CVE-2014-0762
CVSS 2.0
4.7 MediumAV:L/AC:M/Au:N/C:N/I:N/A:C
Weakness
CWE-20
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-0762 is a vulnerability (CVSS 4.7) in Cg Automation Epaq-9410 Substation Gateway, published August 28, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 27th percentile. No source names a fixed version.

References

MoveEnter Open