CVE-2015-6471: Exposure of Sensitive Information to an Unauthorized Actor

Eaton Cooper Power Systems ProView 4.x and 5.x before 5.1 on Form 6 controls and Idea and IdeaPLUS relays does not properly initialize padding fields in Ethernet packets, which allows remote attackers to obtain sensitive information by reading packet data...

PT-2015-7261

Name of the Vulnerable Software and Affected Versions Eaton Cooper Power Systems ProView versions 4.x through 5.x before 5.1 Description The issue is related to the improper initialization of padding fields in Ethernet packets, which can be exploited by remote attackers to obtain sensitive...

CVE-2014-9196: Predictable Exact Value from Previous Values

Eaton Cooper Power Systems ProView 4.0 and 5.0 before 5.0 11 on Form 6 controls and Idea and IdeaPLUS relays generates TCP initial sequence number ISN values linearly, which makes it easier for remote attackers to spoof TCP sessions by predicting an ISN value...

PT-2015-4151

Name of the Vulnerable Software and Affected Versions Eaton Cooper Power Systems ProView versions 4.0 through 5.0 before 5.0 11 Description The issue makes it easier for remote attackers to spoof TCP sessions by predicting a TCP initial sequence number ISN value, as the system generates these...