synced 11 MIN AGO
01 Record

CVE-2014-2346

COPA-DATA zenon DNP3 Improper Input Validation

UnratedPUBLISHEDCNA: icscert
CNA base scoreUnratedNo CNA CVSS vector

02 Description

COPA-DATA zenon DNP3 Improper Input Validation

03 Exploitation and scoring

Exploitation
Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision
Not assessed by CISA
EPSS probability
0.33% probability of exploitation activity in the next 30 days.
EPSS percentile
Equal to or higher than the score of 27.0% of scored records. A rank, not a probability.
NVD base score
The NVD has published no score for this record
NVD CVSS vector
No NVD score to derive
NVD analysis status
Modified. NVD last modified this record on 2026-06-17.
Red Hat severity
No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published
2014-06-05 17:00Z12 YR AGO
Last updated
2025-10-02 22:27Z1 YR AGO
Reserved
2014-03-13
Assigning CNA
icscert
Record state
PUBLISHED
Severity
Not rated by the issuing CNA
CNA CVSS vector
Not published by the issuing CNA
Weaknesses
  • CWE-20Improper Input ValidationClass
Data version
5.1
Document digest
adfb99d022059f79d25ee66d03582f812a260887dffa2aab0e001f2dfa797692

05 Affected products

VendorProductVersionsPlatforms
COPA-DATAzenon DNP3 NG driver (DNP3 master)7.10 SP0 to 7.11 SP0 build 10238—
COPA-DATAzenon DNP3 Process Gateway (DNP3 outstation)0 to 7.11 SP0 build 10238—

06 References

07 Remediation

Build 11206 for Version zenon 7.11 is available that contains updated versions of the affected products that resolve the discovered vulnerabilities. COPA-DATA recommends upgrading or updating the affected products to this version. Please see Knowledge Base articles 179444 and 178001 located here: http://www.copadata.com/en/support.html System integrators and asset owners should contact their local COPA-DATA representative for further information on how to obtain this update.