CVE-2014-9192 Trihedral Engineering Limited VTScada Integer Overflow
MediumCVSS 5.0
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in Trihedral Engineering VTScada (formerly VTS) 6.5 through 9.x before 9.1.20, 10.x before 10.2.22, and 11.x before 11.1.07 allows remote attackers to cause a denial of service (server crash) via a crafted request, which triggers a large memory allocation.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| trihedral vtscada | >= 6.5, < 9.1.20 | 9.1.20 |
| trihedral vtscada | >= 10.0, < 10.2.22 | 10.2.22 |
| trihedral vtscada | >= 11.0, < 11.1.07 | 11.1.07 |
| Trihedral Engineering VTS | >= 6.5, < 9.1.19 | 9.1.19 |
| Trihedral Engineering VTS | >= 10, < 10.2.21 | 10.2.21 |
References
- 71591 third-party-advisory vdb-entry
- www.trihedral.com
- www.cisa.gov
- ics-cert.us-cert.gov third-party-advisory us-government-resource