NVD

Id
35947  
Name
CVE-2014-9196  
Description
Eaton Cooper Power Systems ProView 4.0 and 5.0 before 5.0 11 on Form 6 controls and Idea and IdeaPLUS relays generates TCP initial sequence number (ISN) values linearly, which makes it easier for remote attackers to spoof TCP sessions by predicting an ISN value.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-07-19  
Modified Date
2016-11-28  
Seq
2014-9196  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
183940 35947 CVE-2014-9196 75936  View
183941 35947 CVE-2014-9196 https://ics-cert.us-cert.gov/advisories/ICSA-15-006-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19224 JVNDB-2014-008101 Eaton Cooper Power System Form 6 Control および Idea/IdeaPLUS Relays 上で稼働する ProView における TCP セッションを偽装される脆弱性 Eaton Cooper Power System Form 6 Control および Idea/IdeaPLUS Relays 上で稼働する ProView は、TCP の初期シーケンス番号 (ISN) の値を線形に生成するため、TCP セッションを偽装される脆弱性が存在します。 CVE-2014-9196 76489 CVE-2014-9196 35947 9.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-008101.html 2014-12-02 2015-07-23 View