CVE-2014-9194
Arbiter Systems 1094B GPS Clock Insufficient Verification of Data Authenticity
- Published
- Updated
- Reserved
- Assigned by
- icscert
Description
Arbiter 1094B GPS Substation Clock allows remote attackers to cause a denial of service (disruption) via crafted radio transmissions that spoof GPS satellite broadcasts.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| icscertCNA (assigner) | 2.0 | Medium5.4 | AV:N/AC:H/Au:N/C:N/I:N/A:C |
| NVDNVD · Modified | 2.0 | High7.8 | AV:N/AC:L/Au:N/C:N/I:N/A:C |
- EPSS (exploitation in 30 days)
- 1.1% · top 34% of all CVEs (4 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.4.
Weakness
Affected products
Arbiter Systems · Model 1094B GPS Substation Clock
- affected all versions
What to do
Workaround: Arbiter Systems would like to stress that they have not heard of this vulnerability being exploited in an actual control system. They have created a new product line, the 1200 series, which is not vulnerable to this type of attack. Arbiter Systems plans to continue to sell the 1094B model clock, because it is difficult to spoof the GPS signal and not likely to happen. In the unlikely event that the 1094B has been compromised, it can be recovered by removing and replacing the internal receiver battery. Arbiter Systems plans to investigate the feasibility of changing this model to protect against this type of exploit. Please contact Arbiter Systems Technical Support for additional questions: Phone: 1-800-321-3831 or 1-805-237-3831 Email: http://www.arbiter.com/contact/index.php
References (3)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2014-9194)Record last updated .