CVE-2014-2342

Triangle MicroWorks SCADA Data Gateway Resource Exhaustion

Published May 30, 2014 CVSS 2.0 · 4.3 Medium EPSS 1.8% KEV · Not listed
Description
Triangle MicroWorks SCADA Data Gateway before 3.00.0635 allows remote attackers to cause a denial of service (excessive data processing) via a crafted DNP3 packet.

Remediation

Vendor Solution

Triangle MicroWorks has produced an update and release notes describing the mitigation. Please contact Triangle MicroWorks Support for details on specific platform updates here: http://www.trianglemicroworks.com/SupportPage.htm Release notes are found here: http://www.trianglemicroworks.com/products/scada-data-gateway/what%27s-new Triangle MicroWorks recommends following the International Electrotechnical Commission (IEC) Technical Specification TS 62351 to reduce the risk from vulnerability. More information on recommended implementation practices for Triangle MicroWorks products is available by contacting your product representative.

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2014-2379 Triangle MicroWorks SCADA Data Gateway before 3.00.0635 allows remote attackers to cause a denial of service (excessive data processing) via a crafted DNP3 packet.
History
Type Values Removed Values Added
Title Triangle MicroWorks SCADA Data Gateway Resource Exhaustion
Weaknesses CWE-400
References
Metrics cvssV2_0

{'score': 5.0, 'vector': 'AV:N/AC:L/Au:N/C:N/I:N/A:P'}

cvssV2_0

{'score': 4.3, 'vector': 'AV:N/AC:M/Au:N/C:N/I:N/A:P'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
icscert
Published
Updated
Oct 2, 2025, 10:17 PM
Reserved
Mar 13, 2014, 12:00 AM
Status
Modified
Published
May 30, 2014, 11:55 PM
Modified
Jun 17, 2026, 12:06 AM