VULNERABILITY INTELLIGENCE

CVE-2014-9196

CVSS score9.3 HIGH
EPSS probability2.54%
CISA KEVNot currently listed
Published2015-07-20
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Eaton Cooper Power Systems ProView 4.0 and 5.0 before 5.0 11 on Form 6 controls and Idea and IdeaPLUS relays generates TCP initial sequence number (ISN) values linearly, which makes it easier for remote attackers to spoof TCP sessions by predicting an ISN value.

Weakness classification

  • CWE-342: Predictable Exact Value from Previous Values

Primary references