ByteOS Network

NVD Vulnerability Details :

CVE-2014-9196

Deferred

Source-ics-cert@hq.dhs.gov

Published At-20 Jul, 2015 | 01:59

Updated At-05 Sep, 2025 | 21:15

Eaton Cooper Power Systems ProView 4.0 and 5.0 before 5.0 11 on Form 6 controls and Idea and IdeaPLUS relays generates TCP initial sequence number (ISN) values linearly, which makes it easier for remote attackers to spoof TCP sessions by predicting an ISN value.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	2.0	7.6	HIGH	AV:N/AC:H/Au:N/C:C/I:C/A:C
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Secondary

Version: 2.0

Base score: 7.6

Base severity: HIGH

Vector:

AV:N/AC:H/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

Weaknesses

CWE ID	Type	Source
CWE-342	Primary	ics-cert@hq.dhs.gov
CWE-254	Secondary	nvd@nist.gov

CWE ID: CWE-342

Type: Primary

Source: ics-cert@hq.dhs.gov

CWE ID: CWE-254

Type: Secondary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.securityfocus.com/bid/75936	ics-cert@hq.dhs.gov	N/A
https://www.cisa.gov/news-events/ics-advisories/icsa-15-006-01	ics-cert@hq.dhs.gov	N/A
https://www.eaton.com/cybersecurity	ics-cert@hq.dhs.gov	N/A
http://www.securityfocus.com/bid/75936	af854a3a-2127-422b-91ae-364da2661108	N/A
https://ics-cert.us-cert.gov/advisories/ICSA-15-006-01	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory US Government Resource