Lucene search
HistoryJul 20, 2015 - 1:59 a.m.
CVE-2014-9196
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
6.7
Confidence
Low
EPSS
0.004
Percentile
74.9%
Eaton Cooper Power Systems ProView 4.0 and 5.0 before 5.0 11 on Form 6 controls and Idea and IdeaPLUS relays generates TCP initial sequence number (ISN) values linearly, which makes it easier for remote attackers to spoof TCP sessions by predicting an ISN value.
Affected configurations
Node
eatonproviewMatch4.0
OReatonproviewMatch5.0
OReatonproviewMatch5.0.1
OReatonproviewMatch5.0.2
OReatonproviewMatch5.0.3
OReatonproviewMatch5.0.4
OReatonproviewMatch5.0.5
OReatonproviewMatch5.0.6
OReatonproviewMatch5.0.7
OReatonproviewMatch5.0.8
OReatonproviewMatch5.0.9
OReatonproviewMatch5.0.10
| Vendor | Product | Version | CPE |
|---|---|---|---|
| eaton | proview | 4.0 | cpe:2.3:a:eaton:proview:4.0:*:*:*:*:*:*:* |
| eaton | proview | 5.0 | cpe:2.3:a:eaton:proview:5.0:*:*:*:*:*:*:* |
| eaton | proview | 5.0.1 | cpe:2.3:a:eaton:proview:5.0.1:*:*:*:*:*:*:* |
| eaton | proview | 5.0.2 | cpe:2.3:a:eaton:proview:5.0.2:*:*:*:*:*:*:* |
| eaton | proview | 5.0.3 | cpe:2.3:a:eaton:proview:5.0.3:*:*:*:*:*:*:* |
| eaton | proview | 5.0.4 | cpe:2.3:a:eaton:proview:5.0.4:*:*:*:*:*:*:* |
| eaton | proview | 5.0.5 | cpe:2.3:a:eaton:proview:5.0.5:*:*:*:*:*:*:* |
| eaton | proview | 5.0.6 | cpe:2.3:a:eaton:proview:5.0.6:*:*:*:*:*:*:* |
| eaton | proview | 5.0.7 | cpe:2.3:a:eaton:proview:5.0.7:*:*:*:*:*:*:* |
| eaton | proview | 5.0.8 | cpe:2.3:a:eaton:proview:5.0.8:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2014-9196
2015-07-20 01:00:00
cve
cve
CVE-2014-9196
2015-07-20 01:59:01
ics
ics
prion
prion
Code injection
2015-07-20 01:59:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
6.7
Confidence
Low
EPSS
0.004
Percentile
74.9%
Related for NVD:CVE-2014-9196