CVE-2014-0761: CG Automation ePAQ-9410 Substation Gateway Improper Input Validation

Severity: high (CVSS 7.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-08-28 · updated 2026-06-17
Weakness: CWE-20

Description

The DNP3 driver in CG Automation ePAQ-9410 Substation Gateway allows remote attackers to cause a denial of service (infinite loop or process crash) via a crafted TCP packet.

Affected products

CG Automation ePAQ-9410 Substation Gateway: all versions

References

http://mail.cgautomationusa.com/login.aspx
https://www.cisa.gov/news-events/ics-advisories/icsa-14-238-01
https://ics-cert.us-cert.gov/advisories/ICSA-14-238-01

Get alerted when CVE-2014-0761 or the next vulnerability affects your stack