- What is the severity of CVE-2014-9194?
- CVE-2014-9194 has been scored as a medium severity vulnerability.
- How to fix CVE-2014-9194?
- As a workaround for remediating CVE-2014-9194: Arbiter Systems would like to stress that they have not heard of this vulnerability being exploited in an actual control system. They have created a new product line, the 1200 series, which is not vulnerable to this type of attack. Arbiter Systems plans to continue to sell the 1094B model clock, because it is difficult to spoof the GPS signal and not likely to happen. In the unlikely event that the 1094B has been compromised, it can be recovered by removing and replacing the internal receiver battery. Arbiter Systems plans to investigate the feasibility of changing this model to protect against this type of exploit. Please contact Arbiter Systems Technical Support for additional questions: Phone: 1-800-321-3831 or 1-805-237-3831 Email: http://www.arbiter.com/contact/index.php
- Is CVE-2014-9194 being actively exploited in the wild?
- As for now, there are no information to confirm that CVE-2014-9194 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
- What software or system is affected by CVE-2014-9194?
- CVE-2014-9194 affects Arbiter Systems Model 1094B GPS Substation Clock.