Unscored severity · published Jul 20, 2015
CVE-2014-9196
Eaton Cooper Power Systems ProView 4.0 and 5.0 before 5.0 11 on Form 6 controls and Idea and IdeaPLUS relays generates TCP initial sequence number (ISN) values linearly, which…
–
CVSS
2.5%
EPSS
No
On KEV
Description
Eaton Cooper Power Systems ProView 4.0 and 5.0 before 5.0 11 on Form 6 controls and Idea and IdeaPLUS relays generates TCP initial sequence number (ISN) values linearly, which makes it easier for remote attackers to spoof TCP sessions by predicting an ISN value.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.5% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PR
Proview · Eaton
4.0; 5.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4; +6 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-9196
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-9196
www.securityfocus.com
http://www.securityfocus.com/bid/75936
www.cisa.gov
https://www.cisa.gov/news-events/ics-advisories/icsa-15-006-01
www.eaton.com
https://www.eaton.com/cybersecurity
Third Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-15-006-01
More from Proview
5.3
CVE-2015-6471
Eaton Cooper Power Systems ProView 4.x and 5.x before 5.1 on Form 6 controls and Idea and IdeaPLUS relays does not properly initialize padding fields in Ethernet packets, which…