{"id":"CVE-2014-0762","aliases":["EUVD-2014-0793","GHSA-fv3c-2w3v-8v8j"],"status":"published","title":"CG Automation ePAQ-9410 Substation Gateway Improper Input Validation","description":"The CG Automation Software DNP3 driver, used in the ePAQ-9410 Substation\n Gateway products, does not validate input correctly. An attacker could \ncause the software to go into an infinite loop, causing the process to \ncrash. The system must be restarted manually to clear the condition.","severity":{"version":"2.0","score":4.7,"vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00341,"percentile":0.27806,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2014-08-28T01:00:00Z","modified":"2026-06-17T00:03:35Z","products":[{"vendor":"cg automation","product":"epaq-9410 substation gateway"},{"vendor":"qeiinc","product":"epaq-9410_substation_gateway"}],"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-14-238-01"},{"url":"http://mail.cgautomationusa.com/login.aspx"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-14-238-01","tags":["x_refsource_MISC","x_transferred","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0762"},{"url":"https://github.com/advisories/GHSA-fv3c-2w3v-8v8j"}],"sources":{"cve":[{"id":"CVE-2014-0762","title":"CG Automation ePAQ-9410 Substation Gateway Improper Input Validation","description":"The CG Automation Software DNP3 driver, used in the ePAQ-9410 Substation\n Gateway products, does not validate input correctly. An attacker could \ncause the software to go into an infinite loop, causing the process to \ncrash. The system must be restarted manually to clear the condition.","status":"published","published":"2014-08-28T01:00:00Z","modified":"2025-09-19T18:58:30.389Z","cvss":[{"version":"2.0","score":4.7,"vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","assessor":"cna"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:33:47.741012Z"}],"euvd":[{"id":"EUVD-2014-0793","description":"The CG Automation Software DNP3 driver, used in the ePAQ-9410 Substation\n Gateway products, does not validate input correctly. An attacker could \ncause the software to go into an infinite loop, causing the process to \ncrash. The system must be restarted manually to clear the condition.","status":"published","published":"2014-08-28T01:00:00Z","modified":"2025-09-19T18:58:30Z","cvss":[{"version":"2.0","score":4.7,"vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","level":"medium"}],"updated_at":"2026-11-02T20:31:41.254663Z"}],"ghsa":[{"id":"GHSA-fv3c-2w3v-8v8j","title":"The DNP3 driver in CG Automation ePAQ-9410 Substation Gateway allows physically proximate...","description":"The DNP3 driver in CG Automation ePAQ-9410 Substation Gateway allows physically proximate attackers to cause a denial of service (infinite loop or process crash) via crafted input over a serial line.","status":"published","published":"2022-05-17T04:38:03Z","modified":"2025-09-19T21:32:20Z","cwes":["CWE-20"],"updated_at":"2026-11-02T15:03:40.313612Z"}],"nvd":[{"id":"CVE-2014-0762","description":"The CG Automation Software DNP3 driver, used in the ePAQ-9410 Substation\n Gateway products, does not validate input correctly. An attacker could \ncause the software to go into an infinite loop, causing the process to \ncrash. The system must be restarted manually to clear the condition.","status":"published","published":"2014-08-28T01:55:03.043Z","modified":"2026-06-17T00:03:35.75Z","cvss":[{"version":"2.0","score":4.7,"vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","level":"medium","assessor":"secondary"},{"version":"2.0","score":4.7,"vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:02:55.19899Z"}]}}