CVE-2014-2343 : 상세 정보

CVE-2014-2343

0.09%V4
2014-05-30
23h00 +00:00
A03-Injection
Local
2025-10-02
22h19 +00:00
CVE.org
NVD
특정 CVE 알림
특정 CVE의 변경 사항에 대한 정보를 받아보세요.
알림 관리

CVE 설명

Triangle MicroWorks SCADA Data Gateway Resource Exhaustion

Triangle MicroWorks SCADA Data Gateway before 3.00.0635 allows physically proximate attackers to cause a denial of service (excessive data processing) via a crafted DNP request over a serial line.

CVE 해결 방법

Triangle MicroWorks has produced an update and release notes describing the mitigation. Please contact Triangle MicroWorks Support for details on specific platform updates here: http://www.trianglemicroworks.com/SupportPage.htm Release notes are found here: http://www.trianglemicroworks.com/products/scada-data-gateway/what%27s-new Triangle MicroWorks recommends following the International Electrotechnical Commission (IEC) Technical Specification TS 62351 to reduce the risk from vulnerability. More information on recommended implementation practices for Triangle MicroWorks products is available by contacting your product representative.

CVE 정보

관련 약점

CWE-ID 약점 이름 출처
CWE-400 Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource.
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

메트릭

메트릭 점수 심각도 CVSS 벡터 출처
V2 1.2 AV:L/AC:H/Au:N/C:N/I:N/A:P
V2 2.1 AV:L/AC:L/Au:N/C:N/I:N/A:P nvd@nist.gov

EPSS

EPSS는 취약점이 악용될 가능성을 예측하는 점수 모델입니다.

EPSS 점수

EPSS 모델은 0과 1(0~100%) 사이의 확률 점수를 생성합니다. 점수가 높을수록 취약점이 악용될 가능성이 높습니다.

EPSS 백분위수

백분위수는 EPSS 점수에 따라 CVE의 순위를 매기는 데 사용됩니다. 예를 들어 EPSS 점수 기준 95번째 백분위수의 CVE는 다른 CVE의 95%보다 악용될 가능성이 높습니다.
EPSS First.org

언급된 제품

구성 0

Trianglemicroworks>>Scada_data_gateway >> Version 까지 (포함) 3.00.0633

Trianglemicroworks>>Scada_data_gateway >> Version 2.50

Trianglemicroworks>>Scada_data_gateway >> Version 2.50.0309

Trianglemicroworks>>Scada_data_gateway >> Version 2.51

Trianglemicroworks>>Scada_data_gateway >> Version 2.53

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0515

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0516

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0517

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0518

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0528

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0529

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0536

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0540

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0544

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0545

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0552

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0553

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0558

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0561

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0562

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0564

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0565

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0566

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0567

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0569

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0570

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0571

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0572

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0573

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0574

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0575

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0576

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0577

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0578

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0579

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0580

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0581

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0582

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0583

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0584

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0586

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0587

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0588

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0589

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0590

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0591

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0592

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0594

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0595

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0596

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0597

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0598

Trianglemicroworks>>Scada_data_gateway >> Version 2.54.0599

Trianglemicroworks>>Scada_data_gateway >> Version 3.00

Trianglemicroworks>>Scada_data_gateway >> Version 3.00.0612

Trianglemicroworks>>Scada_data_gateway >> Version 3.00.0615

Trianglemicroworks>>Scada_data_gateway >> Version 3.00.0616

Trianglemicroworks>>Scada_data_gateway >> Version 3.00.0630

참고 자료

CVE Find에 제시된 정보는 엄선된 여러 참고 소스에서 가져옵니다. CVE 데이터는 MITRE Corporation과 국가 취약점 데이터베이스(NVD)에서 제공됩니다. KEV 카탈로그는 CISA에서 가져오며, EPSS 점수는 FIRST.org에서 제공됩니다. CWE 및 CAPEC 데이터는 MITRE Corporation에서 관리하며, CPE 정보는 NVD에서 제공됩니다.