CVE-2014-9196 Eaton’s Cooper Power Series Form 6 Control and Idea/IdeaPlus Relays with Ethernet
Remote attackers can spoof TCP sessions on Eaton industrial relays by predicting linearly generated initial sequence numbers, bypassing session security.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2014-9196?
CVE-2014-9196 is a high-severity vulnerability in Eaton’s Cooper Power Systems Idea/IdeaPLUS relays, published on 20 Jul 2015. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Eaton Cooper Power Systems ProView 4.0 and 5.0 before 5.0 11 on Form 6 controls and Idea and IdeaPLUS relays generates TCP initial sequence number (ISN) values linearly, which makes it easier for remote attackers to spoof TCP sessions by predicting an ISN value.
Which versions are affected by CVE-2014-9196?
It affects 1 product.
Products include Eaton Proview.
How do I fix CVE-2014-9196?
No fix has been published for CVE-2014-9196 yet. Limit exposure of the affected software until one is available.
Is CVE-2014-9196 being exploited?
There is no known exploitation of CVE-2014-9196 in the wild and no public exploit code.
Other vulnerabilities in Eaton’s Cooper Power Systems Idea/IdeaPLUS relays
Sources
Also known as GHSA-jq6q-c5mf-gjcv.