Back
CVE-2014-0762
CG Automation ePAQ-9410 Substation Gateway Improper Input Validation
Medium4.7EPSS 0.34%
- Published
- Updated
- Reserved
- Assigned by
- icscert
Description
The CG Automation Software DNP3 driver, used in the ePAQ-9410 Substation Gateway products, does not validate input correctly. An attacker could cause the software to go into an infinite loop, causing the process to crash. The system must be restarted manually to clear the condition.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| icscertCNA (assigner) | 2.0 | Medium4.7 | AV:L/AC:M/Au:N/C:N/I:N/A:C |
| NVDNVD · Modified | 2.0 | Medium4.7 | AV:L/AC:M/Au:N/C:N/I:N/A:C |
- EPSS (exploitation in 30 days)
- 0.34% · top 72% of all CVEs (3 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.7.
Weakness
Affected products
CG Automation · ePAQ-9410 Substation Gateway
- affected all versions
What to do
Solution: CG Automation has fixed this vulnerability with updated software. Users may obtain the updated software by downloading from this web address: http://mail.cgautomationusa.com/login.aspx
References (3)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2014-0762)Record last updated .