Skip to content
CVE PROGRAM SOURCE RECORD7.6 High

CVE-2014-9196

Eaton’s Cooper Power Series Form 6 Control and Idea/IdeaPlus Relays with Ethernet

Description

Eaton Cooper Power Systems ProView 4.0 and 5.0 before 5.0 11 on Form 6 controls and Idea and IdeaPLUS relays generates TCP initial sequence number (ISN) values linearly, which makes it easier for remote attackers to spoof TCP sessions by predicting an ISN value.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Eaton’s Cooper Power Systems Series Form 6

Default version status: unaffected

  • Pro View 4.0 to ≤ Pro View 5.0affected

Eaton’s Cooper Power Systems Idea/IdeaPLUS relays

Default version status: unaffected

  • Pro View 4.0 to ≤ Pro View 5.0affected

References