CVE-2014-9196: Eaton’s Cooper Power Series Form 6 Control and Idea/IdeaPlus Relays with Ethernet

Published Jul 20, 2015

Updated

Eaton Cooper Power Systems ProView 4.0 and 5.0 before 5.0 11 on Form 6 controls and Idea and IdeaPLUS relays generates TCP initial sequence number (ISN) values linearly, which makes it easier for remote attackers to spoof TCP sessions by predicting an ISN value.

Affected Software

12 affected components

Eaton ProView=4.0

Eaton ProView=5.0

Eaton ProView=5.0.1

Eaton ProView=5.0.2

Eaton ProView=5.0.3

Eaton ProView=5.0.4

Eaton ProView=5.0.5

Eaton ProView=5.0.6

Eaton ProView=5.0.7

Eaton ProView=5.0.8

Eaton ProView=5.0.9

Eaton ProView=5.0.10

Remediation

Information

Eaton’s Cooper Power Systems division has developed ProView 5.0 Revision 11 software that mitigates this vulnerability, and the Form 6 control version was released on June 12, 2015. Idea/IdeaPLUS relay ProView software versions began to be posted on June 30, 2015. ProView 5.0 Revision 11 will be compatible with any hardware and firmware Versions 5.0 and higher. Versions below 5.0 may be updated with the appropriate and corresponding hardware upgrades. Information on how to obtain and install these available remedies is available at: http://www.cooperindustries.com/content/public/en/power_systems/resources/securitysupport.html For additional technical information, please contact Eaton’s Cooper Power Systems at: https://www.eaton.com/cybersecurity

Event History

Jul 20, 2015

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·01:59 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2014-9196?

CVE-2014-9196 is considered a high severity vulnerability due to its potential for remote exploitation.

How do I fix CVE-2014-9196?

To fix CVE-2014-9196, upgrade to Eaton ProView version 5.0.11 or later, as this version addresses the vulnerability.

What impact does CVE-2014-9196 have on affected systems?

CVE-2014-9196 allows attackers to potentially spoof TCP sessions, compromising the integrity of network communications.

Which versions of Eaton ProView are affected by CVE-2014-9196?

CVE-2014-9196 affects Eaton ProView versions 4.0 and 5.0 up to 5.0.10.

Can CVE-2014-9196 be exploited remotely?

Yes, CVE-2014-9196 can be exploited remotely, allowing attackers to predict initial sequence numbers for TCP sessions.