2.1
CWE
20
Advisory Published
Updated

CVE-2014-2343: Input Validation

First published: Fri May 30 2014(Updated: )

Triangle MicroWorks SCADA Data Gateway before 3.00.0635 allows physically proximate attackers to cause a denial of service (excessive data processing) via a crafted DNP request over a serial line.

Credit: ics-cert@hq.dhs.gov

Affected SoftwareAffected VersionHow to fix
Triangle MicroWorks SCADA Data Gateway<=3.00.0633
Triangle MicroWorks SCADA Data Gateway=2.50
Triangle MicroWorks SCADA Data Gateway=2.50.0309
Triangle MicroWorks SCADA Data Gateway=2.51
Triangle MicroWorks SCADA Data Gateway=2.53
Triangle MicroWorks SCADA Data Gateway=2.54.0515
Triangle MicroWorks SCADA Data Gateway=2.54.0516
Triangle MicroWorks SCADA Data Gateway=2.54.0517
Triangle MicroWorks SCADA Data Gateway=2.54.0518
Triangle MicroWorks SCADA Data Gateway=2.54.0528
Triangle MicroWorks SCADA Data Gateway=2.54.0529
Triangle MicroWorks SCADA Data Gateway=2.54.0536
Triangle MicroWorks SCADA Data Gateway=2.54.0540
Triangle MicroWorks SCADA Data Gateway=2.54.0544
Triangle MicroWorks SCADA Data Gateway=2.54.0545
Triangle MicroWorks SCADA Data Gateway=2.54.0552
Triangle MicroWorks SCADA Data Gateway=2.54.0553
Triangle MicroWorks SCADA Data Gateway=2.54.0558
Triangle MicroWorks SCADA Data Gateway=2.54.0561
Triangle MicroWorks SCADA Data Gateway=2.54.0562
Triangle MicroWorks SCADA Data Gateway=2.54.0564
Triangle MicroWorks SCADA Data Gateway=2.54.0565
Triangle MicroWorks SCADA Data Gateway=2.54.0566
Triangle MicroWorks SCADA Data Gateway=2.54.0567
Triangle MicroWorks SCADA Data Gateway=2.54.0569
Triangle MicroWorks SCADA Data Gateway=2.54.0570
Triangle MicroWorks SCADA Data Gateway=2.54.0571
Triangle MicroWorks SCADA Data Gateway=2.54.0572
Triangle MicroWorks SCADA Data Gateway=2.54.0573
Triangle MicroWorks SCADA Data Gateway=2.54.0574
Triangle MicroWorks SCADA Data Gateway=2.54.0575
Triangle MicroWorks SCADA Data Gateway=2.54.0576
Triangle MicroWorks SCADA Data Gateway=2.54.0577
Triangle MicroWorks SCADA Data Gateway=2.54.0578
Triangle MicroWorks SCADA Data Gateway=2.54.0579
Triangle MicroWorks SCADA Data Gateway=2.54.0580
Triangle MicroWorks SCADA Data Gateway=2.54.0581
Triangle MicroWorks SCADA Data Gateway=2.54.0582
Triangle MicroWorks SCADA Data Gateway=2.54.0583
Triangle MicroWorks SCADA Data Gateway=2.54.0584
Triangle MicroWorks SCADA Data Gateway=2.54.0586
Triangle MicroWorks SCADA Data Gateway=2.54.0587
Triangle MicroWorks SCADA Data Gateway=2.54.0588
Triangle MicroWorks SCADA Data Gateway=2.54.0589
Triangle MicroWorks SCADA Data Gateway=2.54.0590
Triangle MicroWorks SCADA Data Gateway=2.54.0591
Triangle MicroWorks SCADA Data Gateway=2.54.0592
Triangle MicroWorks SCADA Data Gateway=2.54.0594
Triangle MicroWorks SCADA Data Gateway=2.54.0595
Triangle MicroWorks SCADA Data Gateway=2.54.0596
Triangle MicroWorks SCADA Data Gateway=2.54.0597
Triangle MicroWorks SCADA Data Gateway=2.54.0598
Triangle MicroWorks SCADA Data Gateway=2.54.0599
Triangle MicroWorks SCADA Data Gateway=3.00
Triangle MicroWorks SCADA Data Gateway=3.00.0612
Triangle MicroWorks SCADA Data Gateway=3.00.0615
Triangle MicroWorks SCADA Data Gateway=3.00.0616
Triangle MicroWorks SCADA Data Gateway=3.00.0630
<=3.00.0633
=2.50
=2.50.0309
=2.51
=2.53
=2.54.0515
=2.54.0516
=2.54.0517
=2.54.0518
=2.54.0528
=2.54.0529
=2.54.0536
=2.54.0540
=2.54.0544
=2.54.0545
=2.54.0552
=2.54.0553
=2.54.0558
=2.54.0561
=2.54.0562
=2.54.0564
=2.54.0565
=2.54.0566
=2.54.0567
=2.54.0569
=2.54.0570
=2.54.0571
=2.54.0572
=2.54.0573
=2.54.0574
=2.54.0575
=2.54.0576
=2.54.0577
=2.54.0578
=2.54.0579
=2.54.0580
=2.54.0581
=2.54.0582
=2.54.0583
=2.54.0584
=2.54.0586
=2.54.0587
=2.54.0588
=2.54.0589
=2.54.0590
=2.54.0591
=2.54.0592
=2.54.0594
=2.54.0595
=2.54.0596
=2.54.0597
=2.54.0598
=2.54.0599
=3.00
=3.00.0612
=3.00.0615
=3.00.0616
=3.00.0630

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is the severity of CVE-2014-2343?

    CVE-2014-2343 has a high severity level as it allows denial of service via excessive data processing from crafted DNP requests.

  • How do I fix CVE-2014-2343?

    To fix CVE-2014-2343, update Triangle MicroWorks SCADA Data Gateway to version 3.00.0635 or later.

  • What types of attacks are possible with CVE-2014-2343?

    CVE-2014-2343 allows physically proximate attackers to launch denial of service attacks by sending crafted DNP requests.

  • Which versions of Triangle MicroWorks SCADA Data Gateway are affected by CVE-2014-2343?

    CVE-2014-2343 affects Triangle MicroWorks SCADA Data Gateway versions prior to 3.00.0635.

  • Is CVE-2014-2343 a remote exploit?

    No, CVE-2014-2343 requires physical proximity to the target, as it exploits the DNP protocol over a serial line.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203