Description (CNA)
Eaton Cooper Power Systems ProView 4.0 and 5.0 before 5.0 11 on Form 6 controls and Idea and IdeaPLUS relays generates TCP initial sequence number (ISN) values linearly, which makes it easier for remote attackers to spoof TCP sessions by predicting an ISN value.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Eaton’s Cooper Power Systems / Series Form 6 | affected Pro View 4.0 through Pro View 5.0 |
| Eaton’s Cooper Power Systems / Idea/IdeaPLUS relays | affected Pro View 4.0 through Pro View 5.0 |
CWE
CWE-342
References
- http://www.securityfocus.com/bid/75936
- https://www.cisa.gov/news-events/ics-advisories/icsa-15-006-01
- https://www.eaton.com/cybersecurity
ADP enrichment
No English description supplied.