CVE-2014-2343: Triangle MicroWorks SCADA Data Gateway Resource Exhaustion

Published May 30, 2014
·
Updated

Triangle MicroWorks SCADA Data Gateway before 3.00.0635 allows physically proximate attackers to cause a denial of service (excessive data processing) via a crafted DNP request over a serial line.

Affected Software

58 affected components
Trianglemicroworks Scada Data Gateway<=3.00.0633
Trianglemicroworks Scada Data Gateway=2.50
Trianglemicroworks Scada Data Gateway=2.50.0309
Trianglemicroworks Scada Data Gateway=2.51
Trianglemicroworks Scada Data Gateway=2.53
Trianglemicroworks Scada Data Gateway=2.54.0515
Trianglemicroworks Scada Data Gateway=2.54.0516
Trianglemicroworks Scada Data Gateway=2.54.0517
Trianglemicroworks Scada Data Gateway=2.54.0518
Trianglemicroworks Scada Data Gateway=2.54.0528
Trianglemicroworks Scada Data Gateway=2.54.0529
Trianglemicroworks Scada Data Gateway=2.54.0536
Trianglemicroworks Scada Data Gateway=2.54.0540
Trianglemicroworks Scada Data Gateway=2.54.0544
Trianglemicroworks Scada Data Gateway=2.54.0545
Trianglemicroworks Scada Data Gateway=2.54.0552
Trianglemicroworks Scada Data Gateway=2.54.0553
Trianglemicroworks Scada Data Gateway=2.54.0558
Trianglemicroworks Scada Data Gateway=2.54.0561
Trianglemicroworks Scada Data Gateway=2.54.0562
Trianglemicroworks Scada Data Gateway=2.54.0564
Trianglemicroworks Scada Data Gateway=2.54.0565
Trianglemicroworks Scada Data Gateway=2.54.0566
Trianglemicroworks Scada Data Gateway=2.54.0567
Trianglemicroworks Scada Data Gateway=2.54.0569
Trianglemicroworks Scada Data Gateway=2.54.0570
Trianglemicroworks Scada Data Gateway=2.54.0571
Trianglemicroworks Scada Data Gateway=2.54.0572
Trianglemicroworks Scada Data Gateway=2.54.0573
Trianglemicroworks Scada Data Gateway=2.54.0574
Trianglemicroworks Scada Data Gateway=2.54.0575
Trianglemicroworks Scada Data Gateway=2.54.0576
Trianglemicroworks Scada Data Gateway=2.54.0577
Trianglemicroworks Scada Data Gateway=2.54.0578
Trianglemicroworks Scada Data Gateway=2.54.0579
Trianglemicroworks Scada Data Gateway=2.54.0580
Trianglemicroworks Scada Data Gateway=2.54.0581
Trianglemicroworks Scada Data Gateway=2.54.0582
Trianglemicroworks Scada Data Gateway=2.54.0583
Trianglemicroworks Scada Data Gateway=2.54.0584
Trianglemicroworks Scada Data Gateway=2.54.0586
Trianglemicroworks Scada Data Gateway=2.54.0587
Trianglemicroworks Scada Data Gateway=2.54.0588
Trianglemicroworks Scada Data Gateway=2.54.0589
Trianglemicroworks Scada Data Gateway=2.54.0590
Trianglemicroworks Scada Data Gateway=2.54.0591
Trianglemicroworks Scada Data Gateway=2.54.0592
Trianglemicroworks Scada Data Gateway=2.54.0594
Trianglemicroworks Scada Data Gateway=2.54.0595
Trianglemicroworks Scada Data Gateway=2.54.0596
Trianglemicroworks Scada Data Gateway=2.54.0597
Trianglemicroworks Scada Data Gateway=2.54.0598
Trianglemicroworks Scada Data Gateway=2.54.0599
Trianglemicroworks Scada Data Gateway=3.00
Trianglemicroworks Scada Data Gateway=3.00.0612
Trianglemicroworks Scada Data Gateway=3.00.0615
Trianglemicroworks Scada Data Gateway=3.00.0616
Trianglemicroworks Scada Data Gateway=3.00.0630

Remediation

Information

Triangle MicroWorks has produced an update and release notes describing the mitigation. Please contact Triangle MicroWorks Support for details on specific platform updates here: http://www.trianglemicroworks.com/SupportPage.htm Release notes are found here: http://www.trianglemicroworks.com/products/scada-data-gateway/what%27s-new Triangle MicroWorks recommends following the International Electrotechnical Commission (IEC) Technical Specification TS 62351 to reduce the risk from vulnerability. More information on recommended implementation practices for Triangle MicroWorks products is available by contacting your product representative.

Event History

May 30, 2014
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·11:55 PM
DescriptionSeverityWeaknessAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2014-2343?

CVE-2014-2343 has a high severity level as it allows denial of service via excessive data processing from crafted DNP requests.

2

How do I fix CVE-2014-2343?

To fix CVE-2014-2343, update Triangle MicroWorks SCADA Data Gateway to version 3.00.0635 or later.

3

What types of attacks are possible with CVE-2014-2343?

CVE-2014-2343 allows physically proximate attackers to launch denial of service attacks by sending crafted DNP requests.

4

Which versions of Triangle MicroWorks SCADA Data Gateway are affected by CVE-2014-2343?

CVE-2014-2343 affects Triangle MicroWorks SCADA Data Gateway versions prior to 3.00.0635.

5

Is CVE-2014-2343 a remote exploit?

No, CVE-2014-2343 requires physical proximity to the target, as it exploits the DNP protocol over a serial line.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203