CVE-2014-2357 SUBNET SubSTATION Server 2 Telegyr 8979 Master Protocol Improper Input Validation
Remote attackers can cause a persistent service crash in SUBNET SubSTATION Server 2 by sending a long RTU-to-Master message.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2014-2357?
CVE-2014-2357 is a high-severity denial of service vulnerability in SUBNET SubSTATION Server 2 Telegyr 8979 Master Protocol, published on 11 Aug 2014. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The GPT library in the Telegyr 8979 Master Protocol application in SUBNET SubSTATION Server 2 before SSNET 2.12 HF18808 allows remote attackers to cause a denial of service (persistent service crash) via a long RTU-to-Master message.
Which versions are affected by CVE-2014-2357?
It affects 1 product.
Products include Subnet Substation Server.
How do I fix CVE-2014-2357?
No fix has been published for CVE-2014-2357 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2014-2357 being exploited?
There is no known exploitation of CVE-2014-2357 in the wild and no public exploit code.
Other vulnerabilities in SUBNET SubSTATION Server 2 Telegyr 8979 Master Protocol
Sources
Also known as GHSA-8wj5-jh5x-f76j.