CVE-2014-2343 : Detail

CVE-2014-2343

0.09%V4
2014-05-30
23h00 +00:00
A03-Injection
Local
2025-10-02
22h19 +00:00
CVE.org
NVD
Notifikasi untuk CVE tertentu
Tetap terinformasi tentang perubahan untuk CVE tertentu.
Kelola notifikasi

Deskripsi CVE

Triangle MicroWorks SCADA Data Gateway Resource Exhaustion

Triangle MicroWorks SCADA Data Gateway before 3.00.0635 allows physically proximate attackers to cause a denial of service (excessive data processing) via a crafted DNP request over a serial line.

Solusi CVE

Triangle MicroWorks has produced an update and release notes describing the mitigation. Please contact Triangle MicroWorks Support for details on specific platform updates here: http://www.trianglemicroworks.com/SupportPage.htm Release notes are found here: http://www.trianglemicroworks.com/products/scada-data-gateway/what%27s-new Triangle MicroWorks recommends following the International Electrotechnical Commission (IEC) Technical Specification TS 62351 to reduce the risk from vulnerability. More information on recommended implementation practices for Triangle MicroWorks products is available by contacting your product representative.

Informasi CVE

Kelemahan Terkait

CWE-ID Nama Kelemahan Sumber
CWE-400 Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource.
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Metrik

Metrik Skor Tingkat keparahan CVSS Vektor Sumber
V2 1.2 AV:L/AC:H/Au:N/C:N/I:N/A:P
V2 2.1 AV:L/AC:L/Au:N/C:N/I:N/A:P nvd@nist.gov

EPSS

EPSS adalah model penilaian yang memprediksi kemungkinan suatu kerentanan dieksploitasi.

Skor EPSS

Model EPSS menghasilkan skor probabilitas antara 0 dan 1 (0 hingga 100%). Semakin tinggi skor, semakin besar probabilitas bahwa suatu kerentanan akan dieksploitasi.

Persentil EPSS

Persentil digunakan untuk meranking CVE berdasarkan skor EPSS mereka. Misalnya, CVE di persentil ke-95 berdasarkan skor EPSS-nya lebih mungkin dieksploitasi daripada 95% CVE lainnya. Dengan demikian, persentil digunakan untuk membandingkan skor EPSS suatu CVE dengan CVE lainnya.
EPSS First.org

Produk yang Disebutkan

Konfigurasi 0

Trianglemicroworks>>Scada_data_gateway >> Version Hingga (termasuk) 3.00.0633

Trianglemicroworks>>Scada_data_gateway >> Version 2.50

Trianglemicroworks>>Scada_data_gateway >> Version 2.50.0309

Trianglemicroworks>>Scada_data_gateway >> Version 2.51

Trianglemicroworks>>Scada_data_gateway >> Version 2.53

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0515

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0516

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0517

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0518

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0528

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0529

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0536

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0540

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0544

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0545

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0552

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0553

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0558

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0561

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0562

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0564

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0565

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0566

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0567

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0569

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0570

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0571

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0572

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0573

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0574

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0575

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0576

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0577

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0578

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0579

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0580

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0581

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0582

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0583

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0584

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0586

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0587

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0588

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0589

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0590

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0591

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0592

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0594

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0595

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0596

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0597

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0598

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0599

Trianglemicroworks>>Scada_data_gateway >> Version 3.00

Trianglemicroworks>>Scada_data_gateway >> Version 3.00.0612

Trianglemicroworks>>Scada_data_gateway >> Version 3.00.0615

Trianglemicroworks>>Scada_data_gateway >> Version 3.00.0616

Trianglemicroworks>>Scada_data_gateway >> Version 3.00.0630

Referensi

Informasi yang disajikan di CVE Find berasal dari beberapa sumber referensi yang dipilih dengan cermat. Data CVE disediakan oleh MITRE Corporation dan National Vulnerability Database (NVD). Katalog Known Exploited Vulnerabilities (KEV) bersumber dari Cybersecurity and Infrastructure Security Agency (CISA), sementara skor EPSS berasal dari FIRST.org. Selain itu, data mengenai kelemahan perangkat lunak (CWE) dan pola serangan umum (CAPEC) dikelola oleh MITRE Corporation, dan informasi tentang konfigurasi perangkat keras dan perangkat lunak (CPE) disediakan oleh NVD.