What is the CVSS score of CVE-2014-0762?

CVE-2014-0762 has a CVSS 2.0 base score of 4.7 (Medium). CVSS vector: AV:L/AC:M/Au:N/C:N/I:N/A:C. EPSS exploitation probability: 0.1%.

Epaq 9410 Substation Gateway CVE-2014-0762

MEDIUM

Improper Input Validation (CWE-20)

2014-08-28 ics-cert@hq.dhs.gov

Denial Of Service Epaq 9410 Substation Gateway

4.7

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

4.7 MEDIUM

AV:L/AC:M/Au:N/C:N/I:N/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:L/AC:M/Au:N/C:N/I:N/A:C

Attack Vector

Local

Attack Complexity

Confidentiality

None

Integrity

None

Availability

Lifecycle Timeline

CVE Published

Aug 28, 2014 - 01:55 cve.org

MEDIUM 4.7

DescriptionCVE.org

The CG Automation Software DNP3 driver, used in the ePAQ-9410 Substation Gateway products, does not validate input correctly. An attacker could cause the software to go into an infinite loop, causing the process to crash. The system must be restarted manually to clear the condition.

AnalysisAI

The CG Automation Software DNP3 driver, used in the ePAQ-9410 Substation Gateway products, does not validate input correctly. Rated medium severity (CVSS 4.7). No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-20. The CG Automation Software DNP3 driver, used in the ePAQ-9410 Substation Gateway products, does not validate input correctly. An attacker could cause the software to go into an infinite loop, causing the process to crash. The system must be restarted manually to clear the condition. Affected products include: Qeiinc Epaq-9410 Substation Gateway.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.