CVE-2014-9196

The CVE covers Eaton Cooper Power Systems ProView Form 6 control and Idea/IdeaPLUS relays with Ethernet, affected since ProView 4.0–5.0. The root cause is a predictable, linearly generated TCP initial sequence number (ISN), enabling remote attackers to spoof sessions and mount MitM attacks. ICS-C...

CVE-2015-6471

CVE-2015-6471 affects Eaton Cooper Power Systems ProView 4.x and 5.x (before 5.1) on Form 6 controls and Idea/IdeaPLUS relays. The root cause is improper initialization of padding fields in Ethernet frames, allowing a remote attacker to read packet data and disclose information. Impact is informa...