CVE-2015-6362

CVE-2015-6362 affects Cisco Connected Grid Network Management System (CG-NMS) web GUI in versions 3.0(0.35) and 3.0(0.54). The issue arises from insufficient authorization controls, allowing remote authenticated users in the Monitor-Only role to bypass restrictions and modify configuration. The r...

CVE-2014-0762

The CG Automation Software DNP3 driver, used in the ePAQ-9410 Substation Gateway products, does not validate input correctly. An attacker could cause the software to go into an infinite loop, causing the process to crash. The system must be restarted manually to clear the condition...

CVE-2014-0761

The DNP3 driver in CG Automation ePAQ-9410 Substation Gateway allows remote attackers to cause a denial of service infinite loop or process crash via a crafted TCP packet...

Design/Logic Flaw

The DNP3 driver in CG Automation ePAQ-9410 Substation Gateway allows remote attackers to cause a denial of service infinite loop or process crash via a crafted TCP packet...

Design/Logic Flaw

The DNP3 driver in CG Automation ePAQ-9410 Substation Gateway allows physically proximate attackers to cause a denial of service infinite loop or process crash via crafted input over a serial line...

CVE-2014-0761

The CVE-2014-0761 vulnerability affects CG Automation’s ePAQ-9410 Substation Gateway DNP3 driver. The issue is improper input validation in the DNP3 driver, where a crafted TCP packet can cause an infinite loop or process crash, leading to a denial of service. Affects all versions of the ePAQ-941...

CVE-2014-0761 CG Automation ePAQ-9410 Substation Gateway Improper Input Validation

The DNP3 driver in CG Automation ePAQ-9410 Substation Gateway allows remote attackers to cause a denial of service infinite loop or process crash via a crafted TCP packet...

CVE-2014-0762

The CVE-2014-0762 issue affects the CG Automation DNP3 driver used in the ePAQ-9410 Substation Gateway. The root cause is improper input validation that can cause an infinite loop, crashing the process and requiring a manual restart, affecting availability. The IP-based path could be exploited re...

PT-2014-3824

Name of the Vulnerable Software and Affected Versions CG Automation ePAQ-9410 Substation Gateway affected versions not specified Description The issue allows physically proximate attackers to cause a denial of service, resulting in an infinite loop or process crash, via crafted input over a seria...

PT-2014-3823

Name of the Vulnerable Software and Affected Versions CG Automation ePAQ-9410 Substation Gateway affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop or process crash, by sending a crafted TCP packet to the DNP3...

CVE-2014-0762: Improper Input Validation

The CG Automation Software DNP3 driver, used in the ePAQ-9410 Substation Gateway products, does not validate input correctly. An attacker could cause the software to go into an infinite loop, causing the process to crash. The system must be restarted manually to clear the condition...

CVE-2014-0761: Improper Input Validation

The DNP3 driver in CG Automation ePAQ-9410 Substation Gateway allows remote attackers to cause a denial of service infinite loop or process crash via a crafted TCP packet...

CG Automation Improper Input Validation

OVERVIEW Researchers Adam Crain of Automatak and Chris Sistrunk of Mandiant have identified an improper input validation vulnerability in the CG Automation ePAQ-9410 Substation Gateway DNP3 protocol components. CG Automation has produced an updated software that mitigates this vulnerability. CG...

CVE-2014-3261

Buffer overflow in the Smart Call Home implementation in Cisco NX-OS on Fabric Interconnects in Cisco Unified Computing System 1.4 before 1.41i, NX-OS 5.0 before 5.03U22 on Nexus 3000 devices, NX-OS 4.1 before 4.12E11l on Nexus 4000 devices, NX-OS 5.x before 5.13N11 on Nexus 5000 devices, NX-OS 5...

Buffer overflow

Buffer overflow in the Smart Call Home implementation in Cisco NX-OS on Fabric Interconnects in Cisco Unified Computing System 1.4 before 1.41i, NX-OS 5.0 before 5.03U22 on Nexus 3000 devices, NX-OS 4.1 before 4.12E11l on Nexus 4000 devices, NX-OS 5.x before 5.13N11 on Nexus 5000 devices, NX-OS 5...

PT-2014-1315

Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions 1.4 through 1.41i Cisco NX-OS versions 5.0 through 5.03U22 on Nexus 3000 devices Cisco NX-OS versions 4.1 through 4.12E11l on Nexus 4000 devices Cisco NX-OS versions 5.x through 5.13N11 on Nexus 5000 devices Cisco NX-OS...

Sql injection

Multiple SQL injection vulnerabilities in the device-management implementation in Cisco Connected Grid Network Management System CG-NMS allow remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug IDs CSCue14553 and CSCue38746...

CVE-2013-1163

CVE-2013-1163 records multiple SQL injection vulnerabilities in the Cisco Connected Grid Network Management System (CG-NMS) device-management implementation. The issues allow remote attackers to execute arbitrary SQL commands via unspecified vectors. This is tied to Bug IDs CSCue14553 and CSCue38...

CVE-2013-1163

Multiple SQL injection vulnerabilities in the device-management implementation in Cisco Connected Grid Network Management System CG-NMS allow remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug IDs CSCue14553 and CSCue38746...

CVE-2013-1171

Cisco CG-NMS contains multiple XSS vulnerabilities in the element-list component that could allow an unauthenticated, remote attacker to inject arbitrary web script or HTML via unspecified vectors. The issue is documented under Cisco Security Advisory Cisco-SA-20130401-CVE-2013-1171 and reference...