CVE-2014-9192
Trihedral Engineering Limited VTScada Integer Overflow
- Published
- Updated
- Reserved
- Assigned by
- icscert
Description
Integer overflow in Trihedral Engineering VTScada (formerly VTS) 6.5 through 9.x before 9.1.20, 10.x before 10.2.22, and 11.x before 11.1.07 allows remote attackers to cause a denial of service (server crash) via a crafted request, which triggers a large memory allocation.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| icscertCNA (assigner) | 2.0 | High7.8 | AV:N/AC:L/Au:N/C:N/I:N/A:C |
| NVDNVD · Modified | 2.0 | Medium5.0 | AV:N/AC:L/Au:N/C:N/I:N/A:P |
- EPSS (exploitation in 30 days)
- 2.9% · top 13% of all CVEs (3 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.
Weakness
Affected products
- affected 6.5 – < 9.1.19
- affected 10 – < 10.2.21
What to do
Solution: Trihedral Engineering Limited has created three updated versions of software. These software updates are available from Trihedral Engineering Ltd.’s FTP site: ftp://ftp.trihedral.com/VTS/ Version Information: * 11.1.09 – Latest build including newest features and fixes. Any installation key with a maintenance expiration date after January 1, 2014, will work this installation. * 10.2.22 –Recommended for all users of VTS 10. Any installation key with a maintenance expiration date after December 1, 2010, will work with this installation. * 09.1.20 – Recommended for all users prior to 10.0. Any installation key with a maintenance expiration date after December 1, 2009, will work with this installation. Help file notes for upgrading VTScada/VTS can be found at: http://www.trihedral.com/help/#Op_Welcome/Wel_UpgradeNotes.htm If you have any questions or any difficulties with installing one of these updates, please call Trihedral Tech Support: 1-855-887-2232 1-902-835-1575 +44 (0) 1224 258910 for the United Kingdom
References (4)
- https://www.cisa.gov/news-events/ics-advisories/icsa-14-343-02 (opens in a new tab)
- 71591 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
- http://www.trihedral.com/help/#Op_Welcome/Wel_UpgradeNotes.htm (opens in a new tab)
- https://ics-cert.us-cert.gov//advisories/ICSA-14-343-02 (opens in a new tab)x_refsource_MISCx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2014-9192)Record last updated .