Skip to content
OpenAdvisories
High ICSA-14-238-01 2 CVEs

CG Automation Improper Input Validation

Published May 29, 2014 · Updated Jun 6, 2025 · Revision 2

Vulnerabilities 2

  • High 7.1

    CG Automation ePAQ-9410 Substation Gateway Improper Input Validation

    The DNP3 driver in CG Automation ePAQ-9410 Substation Gateway allows remote attackers to cause a denial of service (infinite loop or process crash) via a crafted TCP packet.

  • Medium 4.7

    CG Automation ePAQ-9410 Substation Gateway Improper Input Validation

    The CG Automation Software DNP3 driver, used in the ePAQ-9410 Substation Gateway products, does not validate input correctly. An attacker could cause the software to go into an infinite loop, causing the process to crash. The system must be restarted manually…

Revision history

  1. #2

    Advisory converted into a CSAF

  2. #1

    Initial Publication

References