CVE-2014-0762

The CVE-2014-0762 issue affects the CG Automation DNP3 driver used in the ePAQ-9410 Substation Gateway. The root cause is improper input validation that can cause an infinite loop, crashing the process and requiring a manual restart, affecting availability. The IP-based path could be exploited re...

CG Automation Improper Input Validation

OVERVIEW Researchers Adam Crain of Automatak and Chris Sistrunk of Mandiant have identified an improper input validation vulnerability in the CG Automation ePAQ-9410 Substation Gateway DNP3 protocol components. CG Automation has produced an updated software that mitigates this vulnerability. CG...